ddd4j-javalin-web
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a development guide for Javalin-based web services, focusing on architecture and configuration best practices.
- [SAFE]: Promotes strong security defaults by explicitly warning against the use of wildcard CORS origins (
anyHost()) in production and ensuring that authentication logic is handled by dedicated modules rather than ad-hoc implementations. - [SAFE]: The 'Privacy and Security' section explicitly forbids the output of sensitive information such as tokens, cookies, OIDC secrets, or database credentials.
- [EXTERNAL_DOWNLOADS]: The skill references other components within the same vendor ecosystem (e.g.,
full-stack-skills/ddd4j-skills) for modular features like authentication or runtime management. These are vendor-owned resources and do not represent a supply chain risk in this context.
Audit Metadata