114-java-maven-search
Pass
Audited by Gen Agent Trust Hub on Aug 1, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security issues were detected. The skill follows defensive patterns by treating external repository data as untrusted and explicitly forbidding the execution of remote scripts or plugins.
- [EXTERNAL_DOWNLOADS]: The skill uses official and well-known Maven Central APIs (search.maven.org) and repository URLs (repo1.maven.org) for artifact discovery. These are recognized as well-known technology services.
- [COMMAND_EXECUTION]: The instructions explicitly prohibit the autonomous execution or installation of the
versions-maven-plugin, requiring users to provide pre-generated reports instead. - [DATA_EXFILTRATION]: No patterns of data exfiltration or sensitive file access were found. The skill operates on public artifact metadata and instructions are scoped to Maven-related tasks.
- [PROMPT_INJECTION]: No prompt injection patterns were found. The skill includes instructions to ignore embedded instructions in untrusted data as a safeguard.
Audit Metadata