springboot-setup

Pass

Audited by Gen Agent Trust Hub on Jun 16, 2026

Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
  • [SAFE]: The skill performs routine configuration management for a development environment, interviewing the user and persisting settings to a local .spring-config.json file.
  • [COMMAND_EXECUTION]: The skill defines project lifecycle options that involve executing local shell commands, specifically mentioning ./gradlew build for verifying compilation and running tests.
  • [PROMPT_INJECTION]: The skill represents a surface for indirect prompt injection by accepting arbitrary user input and storing it in a configuration file used by subsequent automated skills.
  • Ingestion points: User input collected for fields such as app name, brand name, and project IDs in Step 2.
  • Boundary markers: No specific delimiters or validation markers are applied to user strings before they are written to the JSON file.
  • Capability inventory: The skill writes to the local file system (SKILL.md, Step 4), and the project structure implies subsequent automated reading of these values by other tools capable of shell execution.
  • Sanitization: The instructions do not define any sanitization, escaping, or validation logic for the user-provided configuration values.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 16, 2026, 04:27 PM
Security Audit — agent-trust-hub — springboot-setup