181-java-observability-logging
Pass
Audited by Gen Agent Trust Hub on Aug 1, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill workflow requires running standard build commands (
mvn compile,mvn clean verify) to ensure the project remains stable during logging refactoring. These are common developer tools used for legitimate verification purposes. - [PROMPT_INJECTION]: The skill processes untrusted Java source code, which creates a surface for indirect prompt injection.
- Ingestion points: Java source code files are analyzed as part of the logging assessment workflow.
- Boundary markers: The skill does not define specific delimiters to isolate analyzed code from agent instructions.
- Capability inventory: The skill uses shell execution capabilities through the Maven (
mvn) build tool. - Sanitization: The skill focuses on teaching output sanitization rather than input sanitization for its own ingestion process.
- [SAFE]: The content focuses on defensive programming, specifically providing instructions on how to avoid logging sensitive data (PII, secrets) and how to sanitize untrusted input to prevent log-based injection attacks.
Audit Metadata