312-frameworks-spring-data-jdbc
Pass
Audited by Gen Agent Trust Hub on Aug 1, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute
./mvnw compileand./mvnw clean verify. These commands are standard operations for Java development, used here to ensure the project remains in a valid state during the refactoring process. - [SAFE]: The reference documentation explicitly guides the user to avoid SQL injection by using parameterized queries and
@Paramannotations, which is a key security best practice for database interactions. - [SAFE]: The skill identifies and uses internal toolkit resources (e.g.,
@311-frameworks-spring-jdbcand@313-frameworks-spring-db-migrations-flyway) that follow the vendor's established naming conventions for modular skills. - [SAFE]: The skill processes project source code to provide refactoring suggestions. While this involves reading untrusted data, the agent's capabilities are scoped to the development environment, and no high-risk operations or external exfiltration patterns were detected.
- Ingestion points: Local Java source files and Maven configuration.
- Boundary markers: Not explicitly defined for code ingestion.
- Capability inventory: Shell command execution (Maven) and file system modification (refactoring).
- Sanitization: Not applicable to the logic of static code review and pattern application.
Audit Metadata