122-java-type-design
Pass
Audited by Gen Agent Trust Hub on Aug 1, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute local Maven commands (
mvn compile,./mvnw clean verify) to validate project state before and after applying code changes. This is a standard and necessary function for a code-refactoring assistant. - [PROMPT_INJECTION]: The skill ingests and processes Java source code from the user's project, which serves as a surface for indirect prompt injection. The risk is mitigated by the skill's strict requirements for successful compilation and verification, ensuring that any modifications remain within the bounds of valid Java syntax and project constraints.
Audit Metadata