java-hibernate-jpa
Pass
Audited by Gen Agent Trust Hub on Oct 25, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill requires the agent to read and analyze project files, such as build configurations (pom.xml, build.gradle) and Java source code, which introduces an indirect prompt injection surface if these files contain adversarial instructions. * Ingestion points: External project files including build scripts and Java source code are ingested into the agent's context for diagnosis. * Boundary markers: No specific boundary markers or instructions to ignore embedded prompts are provided in the skill instructions. * Capability inventory: The skill is used in a context where the agent likely has the ability to modify files and suggest database operations based on the analyzed content. * Sanitization: There are no instructions for sanitizing or validating the contents of the processed code or configuration files.
Audit Metadata