springboot-setup
Pass
Audited by Gen Agent Trust Hub on Jun 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [SAFE]: The skill performs routine configuration management for a development environment, interviewing the user and persisting settings to a local
.spring-config.jsonfile. - [COMMAND_EXECUTION]: The skill defines project lifecycle options that involve executing local shell commands, specifically mentioning
./gradlew buildfor verifying compilation and running tests. - [PROMPT_INJECTION]: The skill represents a surface for indirect prompt injection by accepting arbitrary user input and storing it in a configuration file used by subsequent automated skills.
- Ingestion points: User input collected for fields such as app name, brand name, and project IDs in Step 2.
- Boundary markers: No specific delimiters or validation markers are applied to user strings before they are written to the JSON file.
- Capability inventory: The skill writes to the local file system (SKILL.md, Step 4), and the project structure implies subsequent automated reading of these values by other tools capable of shell execution.
- Sanitization: The instructions do not define any sanitization, escaping, or validation logic for the user-provided configuration values.
Audit Metadata