spring-boot-engineer
Pass
Audited by Gen Agent Trust Hub on Mar 27, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill includes explicit instructions in the 'MUST NOT DO' section of SKILL.md to avoid storing secrets in configuration files or hardcoding credentials.
- [SAFE]: Reference implementations for Spring Security 6 in references/security.md use modern, secure patterns like BCrypt password encoding (strength 12) and JWT-based authentication.
- [SAFE]: Global exception handling examples in references/web.md demonstrate how to prevent sensitive internal error details from being exposed to API clients by using generic error messages for unhandled exceptions.
- [SAFE]: Network and database configurations in the reference files use environment variable placeholders (e.g., '${GIT_PASSWORD}', '${CONFIG_PASSWORD}') rather than hardcoded values, ensuring sensitive data is handled externally.
- [SAFE]: The skill encourages the use of secure communication (HTTPS) and rate limiting in its security best practices section.
Audit Metadata