311-frameworks-spring-jdbc
Pass
Audited by Gen Agent Trust Hub on Apr 27, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill instructions mandate the use of
mvn compileandmvn clean verifyto ensure code correctness. These are standard build tools for the intended environment. - [PROMPT_INJECTION]: The skill defines an indirect prompt injection surface as it ingests untrusted Java source code and has the capability to execute shell commands via Maven. This surface is mitigated by strict execution constraints and explicitly defined agent roles. Furthermore, the skill provides active safety instructions to prevent SQL injection in the target codebase by mandating the use of bind parameters.
Audit Metadata