ddd4j-core
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a documentation and review aid for Java developers using the ddd4j framework. It establishes clear boundaries between the domain layer and adapter layers, promoting security best practices like context cleanup to prevent data leakage between requests.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to review user-provided code for framework purity and design patterns. While this means it ingests untrusted data (source code), the instructions are limited to read-only analysis and reporting, which is a standard and low-risk behavior for a review-oriented skill.
- [EXTERNAL_DOWNLOADS]: The documentation contains instructions for users to manually install related skills using
npx skills add. These references point to packages within the verified vendor namespace (full-stack-skills) and are presented as user-initiated configuration steps rather than automated agent actions.
Audit Metadata