ddd4j-extensions
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is primarily instructional and promotes security best practices for framework extension integration, including optional dependency management to prevent core pollution.
- [COMMAND_EXECUTION]: The skill explicitly identifies the risks of remote code execution (RCE) via untrusted plugins and provides mitigations such as signature verification, origin allowlisting, and classloader isolation.
- [DATA_EXFILTRATION]: Instructions include strict prohibitions against logging sensitive information like license keys or monitoring secrets, reducing the risk of accidental credential exposure.
- [PRIVILEGE_ESCALATION]: The skill contains explicit refusals (Example 4) to assist with patching out license validation checks, upholding the integrity of the application's licensing model.
- [DYNAMIC_EXECUTION]: The skill provides defensive strategies against rule-engine-based denial of service (DoS) and code execution, mandating the use of builder-level function restrictions and execution timeouts for QLExpress.
Audit Metadata