316-frameworks-spring-mongodb-migrations-mongock
Pass
Audited by Gen Agent Trust Hub on Sep 26, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes local build and verification commands including './mvnw compile' and 'mvn clean verify' to ensure code integrity before and after applying migration changes. This is a legitimate primary function of the developer-oriented skill.
- [INDIRECT_PROMPT_INJECTION]: The skill presents an attack surface for indirect prompt injection as it ingests and processes untrusted project files while possessing command execution capabilities.
- Ingestion points: The skill reads and evaluates local 'pom.xml' files, Java source code (@ChangeUnit classes), and Spring configuration files.
- Boundary markers: No specific delimiters or boundary warnings are established for the content of processed files.
- Capability inventory: The skill utilizes shell-based Maven commands for project compilation and verification testing.
- Sanitization: The skill implements a safety gate ('EXTERNAL RUNTIME GATE') that explicitly prevents the autonomous pulling or execution of external Docker images without user approval.
Audit Metadata