404-frameworks-quarkus-security
Pass
Audited by Gen Agent Trust Hub on Sep 26, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute shell commands (
./mvnw compile,mvn compile,./mvnw clean verify,mvn clean verify) to validate security improvements and ensure project stability. These commands trigger the execution of code and plugins defined within the project's build configuration. - [INDIRECT_PROMPT_INJECTION]: The skill possesses an attack surface for indirect prompt injection as it is designed to ingest and analyze external project data (Java source code, properties files, and build configurations) to provide security recommendations.
- Ingestion points: Project source files, configuration files (
application.properties), and resource definitions analyzed during the workflow. - Boundary markers: None explicitly defined to delimit untrusted project content from instructions.
- Capability inventory: The agent can execute shell commands through the Maven build system (
mvn). - Sanitization: No specific sanitization or filtering of project content is mentioned before processing.
Audit Metadata