152-java-performance-gatling
Pass
Audited by Gen Agent Trust Hub on Sep 26, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill exhibits a vulnerability surface for indirect prompt injection because it reads and processes existing project files which could potentially contain malicious instructions.
- Ingestion points: Reads
pom.xml, project directory structures, and existing test source files to determine configuration requirements. - Boundary markers: None identified; the skill does not explicitly define delimiters or provide instructions to the agent to disregard instructions found within ingested data.
- Capability inventory: The skill possesses the capability to write new Java source files and execute shell commands through the Maven wrapper (
./mvnw). - Sanitization: No sanitization or validation logic is present to filter content from ingested project files before it is used to generate configurations or commands.
- [COMMAND_EXECUTION]: The skill provides instructions to execute shell commands via the Maven wrapper (
./mvnw gatling:test). This is a legitimate and expected part of the skill's primary purpose to run performance tests.
Audit Metadata