ddd4j-javalin-runtime
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDATA_EXFILTRATION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill analyzes local project resources, creating an ingestion surface for potential indirect prompt injection from untrusted source code. * Ingestion points: Target project source files,
Ddd4jJavalinRuntime.java, and project Object Model (POM) configuration files. * Boundary markers: Absent; the skill does not define specific delimiters to isolate external code content from instructions. * Capability inventory: None; the skill is limited to analysis and reporting, with no active file-write, network, or subprocess execution capabilities defined. * Sanitization: None; there is no explicit filtering or validation of the content being analyzed. - [DATA_EXFILTRATION]: The file
references/source-evidence.mdcontains a hardcoded absolute directory path (/Users/wandl/workspaces/workspace-ddd4j/workspace-ddd4j-boot/ddd4j-javalin) which discloses the author's local filesystem structure. This is a configuration artifact rather than a malicious exfiltration attempt.
Audit Metadata