ddd4j-javalin-architecture

Pass

Audited by Gen Agent Trust Hub on Oct 8, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill instructions and examples align with its stated purpose of architectural review and do not contain any malicious patterns or bypass attempts.
  • [EXTERNAL_DOWNLOADS]: The skill mentions using npx skills add to reference other skills (e.g., ddd4j-javalin-data, ddd4j-core) authored by the same vendor (full-stack-skills). These are legitimate skill management commands within the ecosystem.
  • [DATA_EXPOSURE]: A hardcoded local file path is present in references/source-evidence.md (/Users/wandl/workspaces/...). This appears to be a development workspace path used for reference and does not contain sensitive credentials or system-critical paths.
  • [COMMAND_EXECUTION]: The skill references standard Maven commands and architecture review tasks. While it mentions that automated commits or releases require explicit user authorization, no unauthorized or dangerous shell execution patterns were detected.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 8, 2026, 04:44 AM