315-frameworks-spring-mongodb
Pass
Audited by Gen Agent Trust Hub on Aug 1, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [PROMPT_INJECTION]: Ingestion points: The skill processes user-supplied requests and reads project source files. Boundary markers: There are no explicit instructions or delimiters used to separate data from instructions within the ingested code, creating a surface for indirect prompt injection. Capability inventory: The agent is empowered to modify project files and execute shell commands (Maven).
- [COMMAND_EXECUTION]: The skill workflow requires the agent to run
./mvnw compileandmvn clean verifyto validate changes. These commands execute code within the project's own build environment, which is a standard requirement for this domain. - [EXTERNAL_DOWNLOADS]: The skill configuration and examples reference well-known, standard dependencies such as Spring Data MongoDB and Testcontainers, which are retrieved from established public package registries.
Audit Metadata