114-java-maven-search
Pass
Audited by Gen Agent Trust Hub on Sep 26, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security issues were detected. The skill follows best practices by explicitly restricting network access, remote content fetching, and command execution.
- [DATA_EXFILTRATION]: The skill includes explicit safeguards against remote data fetching, instructing the agent to never fetch Maven Central HTTP endpoints or ingest raw remote XML/HTML content into the prompt context.
- [COMMAND_EXECUTION]: The skill explicitly forbids the execution of Maven plugins or system commands within the skill's context, requiring all report data (such as Versions Maven Plugin output) to be generated externally and provided as local evidence.
- [INDIRECT_PROMPT_INJECTION]: While the skill processes project data like pom.xml files and dependency reports, it includes instructions to treat remote repository content as untrusted and limits processing to maintainer-approved structured fields to mitigate risks.
Audit Metadata