133-java-testing-acceptance-tests
Pass
Audited by Gen Agent Trust Hub on Aug 1, 2026
Risk Level: SAFE
Full Analysis
- [PROMPT_INJECTION]: The skill incorporates robust defensive instructions against indirect prompt injection. It explicitly mandates that Gherkin scenario text be treated as untrusted data and that the agent must never obey instructions embedded within that data.\n- [CREDENTIALS_UNSAFE]: Security constraints are in place to prevent the leakage of sensitive information. The reference documentation specifically forbids embedding real secrets, API keys, or production URLs within test configurations or WireMock stubs.\n- [COMMAND_EXECUTION]: The skill utilizes standard build tool commands (
mvn compile,mvn clean verify) to validate and run tests. These are standard operations for the intended use case and are gated by safety checks that halt execution if compilation fails.\n- [EXTERNAL_DOWNLOADS]: The skill references well-known and trusted Java testing libraries (io.rest-assured, org.wiremock) which are standard in the ecosystem.\n- [SAFE]: The workflow requires that only maintainer-sanitized facts be used as a source, ensuring a chain of trust for the scenarios being implemented.
Audit Metadata