514-frameworks-micronaut-kafka
Pass
Audited by Gen Agent Trust Hub on Aug 1, 2026
Risk Level: SAFE
Full Analysis
- [PROMPT_INJECTION]: No prompt injection patterns were detected. The skill maintains a consistent instructional tone focused on software engineering best practices without attempting to override system constraints.
- [DATA_EXFILTRATION]: No evidence of data exfiltration or hardcoded credentials was found. Configuration examples use standard placeholders and local development defaults (e.g.,
localhost:9092). - [COMMAND_EXECUTION]: The skill instructs the agent to run standard Maven commands (
./mvnw compile,./mvnw clean verify). These are standard build tool wrappers used in Java development environments for compilation and testing. - [EXTERNAL_DOWNLOADS]: Dependencies listed (Micronaut Kafka, Testcontainers) are standard, well-known libraries from official repositories. The guidance explicitly advises using organization-approved, digest-pinned container images for testing, which is a strong security practice.
- [SAFE]: The skill includes specific security warnings, such as preventing the construction of topic names or Kafka header values from untrusted user input, which mitigates injection risks at the application level.
Audit Metadata