170-java-documentation
Pass
Audited by Gen Agent Trust Hub on Aug 1, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes standard Maven build tool commands including
./mvnw validate,./mvnw clean compile, and./mvnw javadoc:javadocto ensure project integrity before and after documentation changes. - [PROMPT_INJECTION]: The skill possesses a surface for indirect prompt injection by ingesting and analyzing Java source files from the
src/main/javadirectory to generate documentation. 1. Ingestion points: Java files insrc/main/java. 2. Boundary markers: Absent. 3. Capability inventory: File system writes and shell command execution via Maven. 4. Sanitization: Absent. - [SAFE]: The skill follows security best practices for developer tools by requiring explicit user confirmation before modifying files and establishing mandatory validation steps to prevent build failures.
Audit Metadata