ddd4j-quarkus-extension-authoring
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is purely instructional, containing markdown documentation and examples for Java/Quarkus development. It does not include any executable scripts, binaries, or automated network commands.
- [DATA_EXFILTRATION]: The skill includes explicit privacy and security instructions in
SKILL.mdforbidding the output of tokens, OIDC secrets, or database credentials. - [EXTERNAL_DOWNLOADS]: The documentation mentions installation commands using
npx skills add full-stack-skills/ddd4j-skills. These are instructional references to other skills by the same author and do not represent a security risk. - [METADATA_POISONING]: A hardcoded local path (
/Users/wandl/workspaces/...) is present inreferences/source-evidence.md. While this exposes the author's local environment structure, it does not pose a threat to the user or influence the agent's safety behavior.
Audit Metadata