ddd-architecture-cola
Pass
Audited by Gen Agent Trust Hub on Jun 23, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides structural guidance and automation for building DDD projects using the COLA v5 framework.
- [COMMAND_EXECUTION]: The skill utilizes local shell commands for project management, such as
mvn archetype:generateand Python scripts for validation (check_cola.py,check_project.py). These commands are standard for Java development workflows and do not involve arbitrary or unsafe execution of untrusted input. - [EXTERNAL_DOWNLOADS]: The skill references official Alibaba COLA Maven archetypes (
com.alibaba.cola:cola-archetype-web) from the Central Repository. This is a standard and expected dependency for the scaffolding functionality. - [SAFE]: The provided Python scripts (
init_project.py,check_cola.py,check_project.py) were analyzed for malicious patterns. They perform legitimate file system operations (reading source code for architectural validation and writing project templates) using standard libraries likepathlibandre. No network exfiltration or obfuscation techniques were found. - [SAFE]: The architectural guidelines (e.g., Domain layer purity, dependency direction rules) align with industry best practices for Clean Architecture and DDD.
Audit Metadata