302-frameworks-spring-boot-rest
Pass
Audited by Gen Agent Trust Hub on Jun 30, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute shell commands using the Maven build tool (
./mvnw compile,mvn clean verify). These commands are used to validate the state of the project before and after applying REST API improvements, which is a standard and safe development practice. - [PROMPT_INJECTION]: The skill possesses an indirect prompt injection surface as it is designed to read and process external data such as Java source code and OpenAPI specification files. An attacker could potentially embed malicious instructions within these files to influence the agent's output during the API improvement process.
- [REMOTE_CODE_EXECUTION]: The skill utilizes the
openapi-generator-maven-pluginto automatically generate Java API interfaces and model types from anopenapi.yamlspecification. This automated code generation is a common industry practice for maintaining consistency between API contracts and implementations.
Audit Metadata