130-java-testing-strategies
Pass
Audited by Gen Agent Trust Hub on Aug 1, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes standard Java build commands (
./mvnw compile,mvn compile,./mvnw clean verify, andmvn clean verify) to manage the project state. These commands are necessary for the skill's purpose of reviewing and improving Java tests and are used in a controlled workflow. - [INDIRECT_PROMPT_INJECTION]: The skill involves reading and modifying project source code and test files. While this creates a surface for indirect prompt injection, the risk is minimal as the agent is guided by specific testing strategy references (RIGHT-BICEP, A-TRIP, CORRECT) rather than executing logic derived from the input data.
- Ingestion points: Java source files and test files in the project workspace.
- Boundary markers: None explicitly used to separate code-under-test from the agent's internal instructions.
- Capability inventory: Shell execution for Maven commands (
mvn,./mvnw) as defined inSKILL.md. - Sanitization: Not present, as the tool is designed to refactor and analyze existing code rather than process untrusted user input strings.
Audit Metadata