412-frameworks-quarkus-panache
Pass
Audited by Gen Agent Trust Hub on Sep 26, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill requires the execution of standard Maven lifecycle commands (
mvn compile,mvn clean verify) to verify the project state before and after applying changes. These are routine operations within a Java development environment. - [INDIRECT_PROMPT_INJECTION]: As a code refactoring tool, the skill has an inherent surface for indirect prompt injection via the project files it analyzes.
- Ingestion points: Local Java source files (entities, repositories, services).
- Boundary markers: None explicitly defined in the instructions; relies on the agent's contextual separation.
- Capability inventory: File system write access (for refactoring) and shell command execution (via Maven).
- Sanitization: The skill directly addresses common injection vulnerabilities by mandating the use of parameterized queries and DTOs instead of raw string concatenation or direct entity exposure.
Audit Metadata