create-spring-boot-java-project
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONCREDENTIALS_UNSAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads a project template from the official Spring Initializr (
https://start.spring.io/starter.zip), which is a well-known service in the Java development ecosystem. - [COMMAND_EXECUTION]: The skill uses standard shell commands to unzip the project, manage the file system (
rm,cd), and execute project tests using the Maven wrapper (./mvnw). These commands are typical for project scaffolding. - [CREDENTIALS_UNSAFE]: The skill provides hardcoded default passwords (e.g.,
rootroot) for the configuration of local development services inapplication.propertiesanddocker-compose.yaml. While hardcoded, these are used as placeholders for local development environments rather than production secrets.
Audit Metadata