411-frameworks-quarkus-jdbc
Pass
Audited by Gen Agent Trust Hub on Apr 27, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [SAFE]: The skill mandates the use of PreparedStatement with bind parameters for all SQL queries, effectively mitigating SQL injection risks. It also enforces connection management using try-with-resources to prevent resource leaks.
- [COMMAND_EXECUTION]: The skill utilizes standard Maven wrapper commands (./mvnw compile and ./mvnw clean verify) to ensure code integrity and functional correctness before and after applying changes.
- [EXTERNAL_DOWNLOADS]: Necessary project dependencies and build plugins are retrieved from official Maven registries during the build and verification process.
- [PROMPT_INJECTION]: Analyzed for indirect prompt injection surface through database results processing. 1. Ingestion points: ResultSet mapping in repository classes. 2. Boundary markers: Explicit row-mapping logic and Optional return types for single-row queries. 3. Capability inventory: Ability to refactor source code and execute Maven commands. 4. Sanitization: Strict requirement for parameter binding and validation via unit tests using Dev Services.
Audit Metadata