ddd-architecture-cola
Pass
Audited by Gen Agent Trust Hub on Oct 6, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill provides utility scripts (
init_project.py,check_cola.py,check_project.py) and Maven archetype commands intended for local execution. These tools are used for project initialization and compliance checking, which is the primary purpose of the skill. - [DYNAMIC_EXECUTION]: The
init_project.pyscript dynamically generates project structures, Mavenpom.xmlfiles, and boilerplate Java classes based on user-supplied parameters. This code generation is a standard feature of project scaffolding tools. - [EXTERNAL_DOWNLOADS]: The documentation references the official Alibaba COLA Maven archetype (
com.alibaba.cola:cola-archetype-web:5.0.0) for generating projects. This is a reference to a well-known vendor's official artifact and does not constitute a security risk. - [INDIRECT_PROMPT_INJECTION]: The validation scripts (
check_cola.py,check_project.py) perform static analysis by reading local source code and scanning for import statements and directory structures. This process is used to generate architectural compliance scores and does not involve unsafe execution of the analyzed content.
Audit Metadata