javax-to-jakarta-migration
Pass
Audited by Gen Agent Trust Hub on Oct 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes external Java source files and build configurations (pom.xml, web.xml) which can contain malicious instructions intended to manipulate the agent's output or actions.
- Ingestion points: Java source files, Maven pom.xml, and web.xml files.
- Boundary markers: None; the instructions do not specify any delimiters to separate instructions from the data being processed.
- Capability inventory: The skill has the ability to read/modify files and execute shell commands via build tools.
- Sanitization: None; the file contents are processed directly without validation.
- [COMMAND_EXECUTION]: The skill instructs the agent to execute build and test commands using Maven and Gradle on the local environment.
- Evidence: Step 5 explicitly calls for running 'mvn clean compile', 'gradlew build', 'mvn test', and 'gradlew test'. If the project being migrated has a compromised build configuration, these commands could execute arbitrary code.
Audit Metadata