The Agent Skills Directory

[SAFE]: The Java source code for the bundled version detector implements security best practices, such as disabling external DTDs and entities in its XML parser to prevent XXE (XML External Entity) attacks when processing Maven configuration files.
[COMMAND_EXECUTION]: The skill executes a local JAR file via shell and batch scripts. This execution is limited to the provided tool's intended purpose of project version detection and does not involve arbitrary command execution or untrusted remote code.
[DATA_EXPOSURE]: The detector reads local project metadata (e.g., pom.xml, build.gradle, and CI workflow files) to identify the target Java version. This information is processed locally to inform the agent's recommendations and is not exfiltrated.

modern-java