500-frameworks-micronaut-create-project
Pass
Audited by Gen Agent Trust Hub on Sep 26, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes shell commands using
sdk,java,mn, andmvnwto manage developer tools and scaffold project structures. - [INDIRECT_PROMPT_INJECTION]: The skill incorporates user-supplied inputs such as artifact IDs, package names, and target directories into shell command templates during the application creation process.
- Ingestion points: Project input collection in Step 1 of
SKILL.mdandreferences/500-frameworks-micronaut-create-project.md. - Boundary markers: None provided to delimit or sanitize user-supplied strings.
- Capability inventory: Subprocess execution via Micronaut CLI (
mn create-app) and Maven wrapper (mvnw clean verify). - Sanitization: No explicit instructions for sanitizing or validating user-provided strings before shell interpolation.
- [DYNAMIC_EXECUTION]: The skill generates project source code and build configuration files at runtime, followed by the execution of the generated project using the Maven wrapper.
Audit Metadata