323-frameworks-spring-boot-testing-acceptance-tests
Pass
Audited by Gen Agent Trust Hub on Sep 26, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes external Gherkin scenario facts, which constitutes a potential attack surface. Ingestion points: Gherkin scenario facts provided in the prompt context. Boundary markers: Explicitly mandates 'maintainer-sanitized' facts and prohibits raw '.feature' files. Capability inventory: File system write access (Java tests) and shell execution (Maven commands). Sanitization: Relies on external manual sanitization by a maintainer.
- [COMMAND_EXECUTION]: The workflow mandates executing shell commands such as './mvnw compile' and './mvnw clean verify' as part of the implementation process. These are standard developer operations but constitute arbitrary command execution in the host environment.
Audit Metadata