cdata-cli-java
Pass
Audited by Gen Agent Trust Hub on Oct 24, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill utilizes the official vendor repository (https://maven.cdata.com) for dependency management, which is the legitimate and expected source for CData software components.
- [SAFE]: Demonstrates secure coding practices by explicitly recommending the use of
PreparedStatementwith parameterized queries to mitigate SQL injection vulnerabilities when executing database commands. - [SAFE]: Provides clear guidance on secret management, instructing users to load sensitive credentials such as OAuth tokens and client secrets from environment variables or external configuration files rather than hard-coding them in application source code.
- [INDIRECT_PROMPT_INJECTION]: The skill defines a workflow for processing user-supplied data (connection strings and SQL queries) to interact with external data sources. This architectural surface area is documented with appropriate security countermeasures, specifically the use of PreparedStatements, which aligns with industry best practices for handling untrusted input in database operations.
Audit Metadata