ddd4j-boot-release
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill incorporates strong validation checks, including Git SHA matching for CI gates and mandatory clean-cache resolution tests to ensure remote artifact availability.
- [SAFE]: Instructions explicitly prohibit the output or storage of credentials, tokens, or sensitive configuration, ensuring that error reports and evidence logs are properly redacted.
- [SAFE]: Interaction with external resources is limited to vendor-owned repositories (full-stack-skills) and standard build toolchains (Maven, Git), with no evidence of unauthorized downloads or command execution.
- [SAFE]: The skill design includes clear refusal logic for unauthorized actions, such as bypassing security scanners or performing ad-hoc pushes using ambient environment credentials.
Audit Metadata