314-frameworks-spring-kafka
Pass
Audited by Gen Agent Trust Hub on Sep 26, 2026
Risk Level: SAFE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill operates on user-provided codebases, which constitutes an ingestion of untrusted data. It possesses the capability to modify files and execute build commands (mvnw). However, it mitigates these risks by providing explicit instructions to the AI agent to avoid command injection in generated code and to verify all changes via compilation and testing.
- [COMMAND_EXECUTION]: The instructions require the use of
./mvnw compileand./mvnw clean verify. These are standard Java development tools used here for safety checks and verification of functional changes, rather than for malicious purposes or privilege escalation. - [EXTERNAL_DOWNLOADS]: The skill references standard Maven dependencies from the Spring Framework and Testcontainers ecosystems (spring-boot-starter-kafka, testcontainers-kafka). These are well-known, industry-standard libraries and do not involve untrusted or remote script execution.
Audit Metadata