springboot-verification
Pass
Audited by Gen Agent Trust Hub on Apr 11, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute shell commands for build systems (Maven and Gradle), Git for version control analysis, and Grep for pattern matching within the codebase.\n- [PROMPT_INJECTION]: The skill contains a surface for indirect prompt injection (Category 8) because it ingests and processes untrusted data from the repository.\n
- Ingestion points: Reads local source code files (*.java, *.yml, *.properties) and the output of 'git diff'.\n
- Boundary markers: Absent; the skill does not use delimiters or instructions to the agent to ignore potential instructions embedded in the analyzed files.\n
- Capability inventory: Subprocess execution via build tools and file system read access.\n
- Sanitization: Absent; the skill does not sanitize or validate the content of the ingested files before processing.
Audit Metadata