132-java-testing-integration-testing
Pass
Audited by Gen Agent Trust Hub on Aug 1, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill requires the execution of shell commands such as
./mvnw compile,mvn compile,./mvnw clean verify, andmvn clean verify. These are standard tools in the Java ecosystem used for their intended purpose of validating code integrity during the development process. - [EXTERNAL_DOWNLOADS]: The skill advises the user to add the
org.wiremock:wiremock-standalonedependency. This is a well-known library for HTTP stubbing, and the instructions correctly specify thetestscope to prevent it from entering production environments. - [PROMPT_INJECTION]: The skill is subject to indirect prompt injection risks as it is designed to read and analyze user-provided Java source code to determine the required testing topology.
- Ingestion points: Java source files and import statements scanned during the topology detection phase in Step 1.
- Boundary markers: The instructions do not define explicit boundaries or warnings for the agent when processing user-provided code.
- Capability inventory: The skill can execute shell commands via Maven and write new Java and JSON files to the filesystem.
- Sanitization: No specific sanitization or filtering logic is defined for the analysis of imported code signals.
Audit Metadata