maven-snapshot-publication-recovery
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill's core functionality involves analyzing and processing external Maven POM files and repository metadata. This ingestion of untrusted external data presents a surface for indirect prompt injection, where malicious instructions could be embedded in build artifacts to compromise the agent or build environment.
- Ingestion points: Accessing and parsing Git repositories, POM files, and Maven repository settings as defined in SKILL.md and the recovery playbook.
- Boundary markers: The skill mitigates risks by requiring the use of isolated temporary local repositories for all verification steps.
- Capability inventory: The agent is empowered to execute Maven commands (mvn) and use the deploy-file plugin, which allows for remote repository updates and local file system access.
- Sanitization: Detailed instructions are provided to ensure that no credentials, tokens, or other sensitive secrets are logged or included in command-line outputs.
Audit Metadata