305-frameworks-spring-boot-modulith
Pass
Audited by Gen Agent Trust Hub on Sep 26, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill requires the execution of shell commands, specifically
./mvnw compileand./mvnw clean verify, to validate the application state and ensure architectural integrity. While these are necessary for the skill's primary purpose, they involve running build tools on local files. - [INDIRECT_PROMPT_INJECTION]: The skill analyzes external data including Java source files, Maven configuration (
pom.xml), and directory structures. This represents a vulnerability surface where malicious instructions embedded in a project's codebase could potentially influence the agent's behavior. - Ingestion points: Inspects project structure, Maven dependencies, and Java package boundaries as described in
references/305-frameworks-spring-boot-modulith.md. - Boundary markers: None identified; the skill does not explicitly instruct the agent to ignore instructions embedded within the source code it analyzes.
- Capability inventory: The skill is authorized to perform compilation and testing via shell commands (
mvn,mvnw) inSKILL.md. - Sanitization: There are no specific instructions to sanitize or escape content read from the project files before processing.
Audit Metadata