122-java-type-design

Pass

Audited by Gen Agent Trust Hub on Apr 27, 2026

Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTIONNO_CODE
Full Analysis
  • [COMMAND_EXECUTION]: The skill instructs the agent to execute shell commands such as ./mvnw compile and mvn clean verify. These are standard operations in Java development used to validate code compilation and project integrity.
  • [PROMPT_INJECTION]: The skill reviews and refactors Java code provided in the project environment, which represents a surface for indirect prompt injection. Evidence: (1) Ingestion points: Java source code files processed by the agent; (2) Boundary markers: Absent from the instructions; (3) Capability inventory: The skill utilizes shell command execution (mvn, ./mvnw); (4) Sanitization: No sanitization or validation of the input code is specified. Maliciously crafted source code could attempt to influence the agent's logic.
  • [NO_CODE]: The skill is composed entirely of Markdown instructions and reference material, containing no scripts or executable code of its own.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 27, 2026, 06:08 AM