401-frameworks-quarkus-core
Pass
Audited by Gen Agent Trust Hub on Apr 27, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill requires the execution of standard Maven build commands (
./mvnw compile,mvn compile,./mvnw clean verify,mvn clean verify) to validate project state before and after modifications. These are established development workflows and do not pose an inherent security risk in this context. - [PROMPT_INJECTION]: The skill involves processing and refactoring user-provided Java source code, which creates a surface for indirect prompt injection. Ingestion points: User-provided Java files and project configuration files. Boundary markers: The skill provides explicit 'Constraints' and 'Safeguards' that define the scope of allowed actions. Capability inventory: Shell execution of Maven build tools for project validation. Sanitization: There is no explicit sanitization of input code content, but the skill limits modifications to Quarkus-specific patterns and requires successful compilation.
Audit Metadata