java-architect
Pass
Audited by Gen Agent Trust Hub on Sep 28, 2026
Risk Level: SAFECOMMAND_EXECUTIONCREDENTIALS_UNSAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill's core workflow in
SKILL.mdguides the agent to use standard local build wrappers (./mvnw verifyand./gradlew check) to validate query optimizations, security filter configurations, and test coverage as part of the implementation lifecycle. - [CREDENTIALS_UNSAFE]: Example configuration files in
references/spring-boot-setup.mdandreferences/spring-security.mdinclude placeholder credentials for local development databases and JWT signing keys (e.g.,DATABASE_PASSWORD: demo), which are documented as examples to be replaced by environment variables in production.
Audit Metadata