ddd4j-boot-data
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides structured guidance for database integration and transaction management. No malicious behaviors such as credential theft or remote execution were identified. The workflow focuses on architectural verification and behavior testing within a developer environment.
- [CREDENTIALS_UNSAFE]: The skill demonstrates good security posture by explicitly instructing the agent to redact credentials, tokens, and sensitive connection strings from its output (SKILL.md, references/faq-deep.md). This is a safe practice that mitigates accidental data exposure.
- [EXTERNAL_DOWNLOADS]: The skill recommends adding related modules from the same vendor using 'npx skills add full-stack-skills/ddd4j-skills'. These are identified as legitimate vendor resources and do not represent a supply chain threat.
- [INDIRECT_PROMPT_INJECTION]: While the skill is designed to analyze project artifacts like POM files and source code, it follows a strict workflow focusing on architectural verification. It does not contain instructions that would interpolate untrusted data into executable contexts in a way that suggests vulnerability to prompt injection.
Audit Metadata