ddd4j-boot-bom
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted local project files, which creates a potential surface for indirect prompt injection attacks.
- Ingestion points: The skill reads Maven configuration files (pom.xml) and other project source files to perform its analysis.
- Boundary markers: There are no specific instructions or delimiters provided to ensure that data read from the files is not interpreted as instructions.
- Capability inventory: The skill enables the agent to execute shell commands, specifically for running Maven builds, tests, and generating effective POMs.
- Sanitization: No sanitization or validation of the ingested XML or source code is performed before it is processed by the agent.
Audit Metadata