ddd4j-quarkus-cache
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFENO_CODE
Full Analysis
- [SAFE]: The skill consists entirely of instructional markdown and examples. It does not contain executable scripts or hidden commands.
- [DATA_EXPOSURE]: The skill includes clear security guidelines in
SKILL.mdandreferences/faq-deep.md, explicitly instructing the agent and users to redact tokens, OIDC secrets, and private credentials. - [EXTERNAL_DOWNLOADS]: The skill references
npx skills addcommands to install related modules. These references target the vendor's own repository (full-stack-skills/ddd4j-skills), which is consistent with the author context and represents standard installation procedures for this ecosystem. - [INDIRECT_PROMPT_INJECTION]: While the skill defines a workflow for analyzing project source code (POMs, Java classes), it focuses on structural verification and configuration review. No patterns were found that attempt to exploit the code analysis process for malicious instruction injection.
Audit Metadata