182-java-observability-metrics-micrometer
Pass
Audited by Gen Agent Trust Hub on Sep 26, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONNO_CODE
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to use standard build commands such as
./mvnw clean verifyormvn clean verifyto validate metrics registration and code changes. - [INDIRECT_PROMPT_INJECTION]: The skill facilitates code refactoring based on user requests, which creates an attack surface for indirect injection. However, it provides robust guardrails by mandating 'CARDINALITY SAFETY' to prevent high-cardinality or sensitive data like UUIDs and emails from being used in metrics tags.
- [NO_CODE]: The analyzed skill consists entirely of instructional markdown and configuration references; it does not contain any executable scripts or binaries.
Audit Metadata