The Agent Skills Directory

[PROMPT_INJECTION]: The skill contains standard instructional content for software development. No attempts to override agent behavior, bypass safety filters, or extract system prompts were found.
[DATA_EXPOSURE_AND_EXFILTRATION]: No sensitive file paths, hardcoded credentials, or network operations to untrusted domains were identified. External links target official Spring Framework documentation (spring.io).
[OBFUSCATION]: The content is clear and uses standard Markdown formatting. There is no evidence of Base64 encoding, zero-width characters, homoglyphs, or hidden text patterns.
[UNVERIFIABLE_DEPENDENCIES_AND_REMOTE_CODE_EXECUTION]: The skill references standard, well-known testing libraries (JUnit, Mockito, AssertJ) and the Spring Boot starter. No remote script downloads or execution patterns (e.g., curl|bash) are present.
[PRIVILEGE_ESCALATION]: No commands for elevating privileges, such as sudo, chmod 777, or modifying system configuration files, were found.
[PERSISTENCE]: The skill does not attempt to modify shell profiles, cron jobs, startup folders, or registry keys to maintain access across sessions.
[INDIRECT_PROMPT_INJECTION]: The skill handles unit test events and user objects locally. While it describes an ingestion surface for data, it lacks dangerous capabilities that would make it exploitable via indirect injection.
[DYNAMIC_EXECUTION]: The skill provides static Java code examples for unit testing. It does not perform runtime compilation of untrusted input, library injection, or unsafe deserialization.
[DYNAMIC_CONTEXT_INJECTION]: The skill does not use the dynamic context injection syntax (!command) to execute shell commands at load time.

unit-test-application-events