132-java-testing-integration-testing
Pass
Audited by Gen Agent Trust Hub on Sep 26, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill explicitly instructs the agent to execute shell commands to compile and verify the project.
- Evidence: The instructions require running
./mvnw compile,mvn compile,./mvnw clean verify, andmvn clean verifyat multiple stages of the workflow. - [INDIRECT_PROMPT_INJECTION]: The skill performs static analysis of provided Java source code to determine service topology, which could be influenced by adversarial content in the ingested files.
- Ingestion points: Java source files provided in the agent's context (e.g., scanning imports and API usage).
- Boundary markers: No specific delimiters or "ignore instructions" warnings are defined for the code analysis phase.
- Capability inventory: The skill possesses the ability to write new Java classes and JSON mapping files to the file system, and to execute shell-based build tools.
- Sanitization: The skill lacks explicit sanitization or validation logic for the data extracted from the source files before it is used to generate code or trigger commands.
Audit Metadata