315-frameworks-spring-mongodb
Pass
Audited by Gen Agent Trust Hub on May 7, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill directs the agent to execute standard Maven commands (
./mvnw compileand./mvnw clean verify) for build verification and testing. This is a common and necessary practice in Java development to ensure code integrity after applying changes. - [PROMPT_INJECTION]: The instructions include specific safeguards to prevent NoSQL injection vulnerabilities in the generated output. It mandates the use of the Criteria API and bound parameters while explicitly forbidding string concatenation for query building, which is a key security best practice.
- [SAFE]: No indicators of malicious behavior, such as data exfiltration, unauthorized network access, or obfuscation, were identified. The skill aligns with professional software engineering security standards and promotes defensive coding practices.
Audit Metadata