500-frameworks-micronaut-create-project
Pass
Audited by Gen Agent Trust Hub on Jul 11, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill executes local shell commands to manage development environments and project generation.
- Uses
sdk(SDKMAN) to list, install, and switch Java and Micronaut CLI versions. - Uses the
mn(Micronaut CLI) to scaffold new Maven projects. - Uses
./mvnwormvnto perform project verification viaclean verifygoals. - [EXTERNAL_DOWNLOADS]: The skill facilitates the download of official Java Development Kits (JDKs) and the Micronaut CLI framework through SDKMAN, which is a well-known and trusted service for JVM tool management.
- [PROMPT_INJECTION]: The skill exhibits a standard indirect prompt injection surface by interpolating user-provided inputs—such as artifact IDs, package names, and feature lists—directly into shell commands. While this is necessary for its primary function as a project generator, it relies on the underlying agent's sanitization to prevent command injection via malicious input parameters.
- [SAFE]: The skill includes explicit safety constraints, such as refusing to install SDKMAN automatically and requiring user confirmation before overwriting existing directories or installing new software candidates.
Audit Metadata