ddd4j-version-selection
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze project-specific data such as
pom.xmlfiles, JDK versions, and toolchain configurations to provide version compatibility recommendations. This creates a surface for indirect prompt injection if the ingested files contain malicious instructions. However, the skill's decision logic is strictly governed by a JDK-to-version mapping matrix, which significantly mitigates the risk of the agent following instructions embedded within the analyzed data. - [SAFE]: The skill instructions emphasize security best practices, such as never outputting credentials or private repository tokens, and redacting sensitive errors. The recommended verification commands are standard Maven operations for dependency resolution.
Audit Metadata