124-java-secure-coding
Pass
Audited by Gen Agent Trust Hub on Jun 30, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes Maven and the Maven Wrapper (./mvnw) to compile and verify the project. These are standard tools in the Java ecosystem used for build automation and project verification.
- [PROMPT_INJECTION]: The skill features an indirect prompt injection surface as it ingests and processes untrusted user-provided Java code. Evidence: 1. Ingestion points: Java source files in the project directory. 2. Boundary markers: Not explicitly defined in the instructions. 3. Capability inventory: Local command execution through Maven and file system writes. 4. Sanitization: The skill does not perform automated sanitization of the input code before processing. This is a common and accepted risk surface for developer-focused coding assistants.
Audit Metadata