ddd4j-boot-testing
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill instructions and examples follow standard software testing and quality assurance practices for the Spring Boot ecosystem.
- [PROMPT_INJECTION]: No attempts to override safety guidelines or bypass agent constraints were found. The skill includes specific instructions to handle sensitive data safely (e.g., redacting credentials in configuration dumps).
- [DATA_EXPOSURE]: There are no hardcoded secrets or sensitive file paths targeted for exfiltration. The skill explicitly forbids the output of credentials, tokens, or production connection strings in the 'Privacy and Security' section.
- [EXTERNAL_DOWNLOADS]: The skill mentions 'npx skills add full-stack-skills/ddd4j-skills', which refers to a sibling skill from the same vendor. This is a standard installation instruction for the platform and is not considered a malicious remote download.
- [INDIRECT_PROMPT_INJECTION]: While the skill analyzes project source code (POM files, Java source) to generate test reports, it operates on the user's local workspace. It includes clear boundaries for evidence gathering and warns against leaking sensitive environmental data during report generation.
- [OBFUSCATION]: A manual and automated scan of the markdown and example files revealed no hidden characters, homoglyphs, or encoded strings designed to mask malicious intent.
Audit Metadata