ddd4j-boot-auth
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions to install related modules using the command
npx skills add full-stack-skills/ddd4j-skills. This involves downloading and executing packages from the vendor's repository. These resources are verified as belonging to the same author (full-stack-skills) and are consistent with the skill's intended purpose. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze external project data, which constitutes a potential attack surface for indirect prompt injection.
- Ingestion points: The agent reads project-specific files including Maven POMs, Java source code, and test results from the local workspace.
- Boundary markers: The instructions do not define specific delimiters to isolate untrusted code content from the agent's internal instructions.
- Capability inventory: The skill's primary functions are analytical, focusing on reporting configuration state and verifying authentication behavior through existing tests.
- Sanitization: The skill includes explicit security constraints to redact all credentials, tokens, and sensitive business data before outputting any troubleshooting information, which significantly mitigates data exfiltration risks.
Audit Metadata