143-java-functional-exception-handling
Pass
Audited by Gen Agent Trust Hub on Sep 26, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute standard Maven build commands (
./mvnw validate,mvn validate,./mvnw clean verify,mvn clean verify) to ensure project state and verify changes. This is appropriate for a Java development-focused skill. - [EXTERNAL_DOWNLOADS]: The skill requires the
io.vavr:vavrandSLF4Jlibraries. These are well-known, reputable open-source libraries in the Java ecosystem used for functional programming and logging. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to process and refactor Java source code (untrusted data) and has the capability to execute shell commands (Maven). While this constitutes an attack surface, the focus on specific functional programming patterns and the use of standard build tools for verification makes the risk low in this context.
- Ingestion points: Java source code provided by the user for refactoring.
- Boundary markers: None explicitly defined in instructions.
- Capability inventory: Execution of shell commands via Maven build wrapper or system Maven.
- Sanitization: The skill generates Java code based on predefined functional patterns.
Audit Metadata