416-frameworks-quarkus-mongodb-migrations-mongock
Pass
Audited by Gen Agent Trust Hub on Sep 26, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes external project files like pom.xml and Java source code which constitutes an indirect injection surface. This is typical for development-oriented skills.
- Ingestion points: Project configuration files (pom.xml), properties files, and existing Java source code.
- Boundary markers: None provided; the agent is not instructed to ignore embedded commands in input data.
- Capability inventory: The skill allows writing Java source files and executing Maven build commands (./mvnw compile and ./mvnw verify).
- Sanitization: None observed in the instructions.
- [COMMAND_EXECUTION]: The workflow requires the use of standard Maven wrapper commands (./mvnw) to compile and verify the project state, which is a legitimate requirement for ensuring migration safety.
Audit Metadata