404-frameworks-quarkus-security
Pass
Audited by Gen Agent Trust Hub on Aug 1, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill instructs the user to follow industry-standard security practices for Quarkus, such as using
@RolesAllowed,@Authenticated, and@PermitAllannotations. - [SAFE]: The guidance explicitly warns against hardcoding secrets and recommends using environment variables or secret management systems for OIDC credentials.
- [SAFE]: The skill provides examples of secure CORS configuration, preventing overly permissive origin policies.
- [SAFE]: The workflow includes mandatory compilation and verification steps (
mvn compile,mvn clean verify) to ensure changes do not break the application, which is a standard development practice. - [SAFE]: Logging guidelines correctly advise against logging sensitive data like JWTs or raw Authorization headers.
Audit Metadata