131-java-testing-unit-testing
Pass
Audited by Gen Agent Trust Hub on Sep 26, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill requires the use of standard Maven build commands (e.g.,
./mvnw compile,mvn clean verify) to ensure project stability before and after applying test improvements. These commands are typical for the skill's primary purpose of Java development. - [INDIRECT_PROMPT_INJECTION]: As the skill is designed to review, improve, and refactor existing Java source code and test files, it possesses an attack surface where malicious instructions could be embedded in the data being processed.
- Ingestion points: The skill ingests Java source files and test suites from the project workspace during the analysis and refactoring workflow.
- Boundary markers: The instructions do not specify any boundary markers or "ignore embedded instructions" warnings for the agent when processing the external code.
- Capability inventory: The skill is capable of modifying files (writing refactored tests) and executing shell commands through the project's build system (Maven).
- Sanitization: No specific sanitization or validation of the ingested code content is documented.
Audit Metadata