122-java-type-design
Pass
Audited by Gen Agent Trust Hub on Apr 27, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTIONNO_CODE
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute shell commands such as
./mvnw compileandmvn clean verify. These are standard operations in Java development used to validate code compilation and project integrity. - [PROMPT_INJECTION]: The skill reviews and refactors Java code provided in the project environment, which represents a surface for indirect prompt injection. Evidence: (1) Ingestion points: Java source code files processed by the agent; (2) Boundary markers: Absent from the instructions; (3) Capability inventory: The skill utilizes shell command execution (mvn, ./mvnw); (4) Sanitization: No sanitization or validation of the input code is specified. Maliciously crafted source code could attempt to influence the agent's logic.
- [NO_CODE]: The skill is composed entirely of Markdown instructions and reference material, containing no scripts or executable code of its own.
Audit Metadata