523-frameworks-micronaut-testing-acceptance-tests

Pass

Audited by Gen Agent Trust Hub on Apr 27, 2026

Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
  • [SAFE]: The skill explicitly instructs against embedding real API keys or production URLs in test code, directing the use of WireMock and test properties instead. It leverages established Micronaut testing patterns that minimize security risks in test environments.
  • [COMMAND_EXECUTION]: The skill includes instructions to run standard build commands (mvn compile and mvn clean verify) to validate the project's state. These are standard Java development commands and do not involve suspicious parameters or privilege escalation.
  • [PROMPT_INJECTION]: The skill exhibits a surface for indirect prompt injection as it processes external Gherkin .feature files to generate source code. Ingestion points: Feature files provided in the user context. Boundary markers: The instructions specify looking for scenarios tagged with @acceptance or @acceptance-tests. Capability inventory: The skill has the capability to write Java files and execute Maven commands. Sanitization: The skill instructions do not specify input validation for the feature file content, relying on the model's instruction following and the specific implementation template provided.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 27, 2026, 03:32 PM