openapi-to-application-java-spring-boot
Pass
Audited by Gen Agent Trust Hub on Nov 2, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructions involve processing OpenAPI specifications that can be sourced from external files, URLs, or user input. These specifications are used to influence code generation and build configurations.
- Ingestion Points: OpenAPI specification files are saved to src/main/resources/openapi/ as described in Step 0.
- Capability Inventory: The skill involves modifying project build files (pom.xml, build.gradle), generating Java source code, and executing build lifecycle commands (./mvnw verify, ./gradlew build) as seen in Step 2 and Step 4.
- Boundary Markers: The skill does not provide specific instructions for using delimiters or boundary markers to isolate untrusted specification data.
- Sanitization: No explicit sanitization or validation steps for the incoming OpenAPI specification content are mentioned before it is processed by the generator plugin.
Audit Metadata