303-frameworks-spring-boot-validation
Pass
Audited by Gen Agent Trust Hub on Sep 26, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill requires the agent to execute shell commands using the Maven build tool (
./mvnw compile,mvn compile,./mvnw clean verify,mvn clean verify) to ensure project stability before and after changes. - [DYNAMIC_EXECUTION]: Running Maven build lifecycles involves the dynamic execution of tasks and plugins defined within the project's build configuration (e.g.,
pom.xml). - [INDIRECT_PROMPT_INJECTION]: The skill operates on external project code and user-provided requirements to design or refactor validation logic, creating an attack surface where malicious code in the project files could influence agent behavior.
- Ingestion points: The skill reads the current project setup, source code, and user instructions during the 'Gather scope' phase.
- Boundary markers: None present; the skill does not define specific delimiters or instructions to ignore embedded prompts in the analyzed code.
- Capability inventory: The skill utilizes command execution for project compilation and verification via Maven.
- Sanitization: No explicit sanitization or validation of the ingested project code is performed before processing.
Audit Metadata