503-frameworks-micronaut-validation
Pass
Audited by Gen Agent Trust Hub on Sep 26, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill requires the execution of Maven commands (
./mvnw compile,mvn compile,./mvnw clean verify,mvn clean verify) to validate project state. This is a standard and expected part of a Java development workflow, although it involves executing local project-specific scripts and build configurations. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to analyze and modify existing project code, which serves as a surface for indirect prompt injection. A malicious project could contain instructions within comments or code intended to deceive the agent.
- Ingestion points: Project source files and
application.ymlconfigurations analyzed during the workflow (Step 1 and 2). - Boundary markers: None identified in the provided instructions.
- Capability inventory: Execution of shell commands via the Maven wrapper (
mvnw). - Sanitization: Not present; the agent relies on its own internal safety filters when processing code content.
Audit Metadata