ddd4j-annotation
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to analyze user-provided Java source code and configuration files. While this constitutes an attack surface for indirect prompt injection if the processed code contains malicious instructions, the skill's primary function is analytical. It lacks dangerous capabilities like automated file modification or network exfiltration, and its logic is focused on architectural review and metadata validation.
- [EXTERNAL_DOWNLOADS]: The skill references other related skills within the same author's ecosystem (
full-stack-skills/ddd4j-skills) and provides installation commands using the platform's standard package manager (npx skills add). These are legitimate vendor references for modular functionality and do not represent a security risk.
Audit Metadata