515-frameworks-micronaut-mongodb
Pass
Audited by Gen Agent Trust Hub on Sep 26, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill requires the agent to perform compilation and verification using
./mvnw compileand./mvnw clean verify. These are standard, benign build operations used to maintain code quality and ensure successful integration.- [EXTERNAL_DOWNLOADS]: The instructions reference standard ecosystem dependencies such as Micronaut Data MongoDB and Testcontainers. These are legitimate, well-known libraries sourced from official package registries.- [INDIRECT_PROMPT_INJECTION]: The skill provides patterns for processing external data through database queries, implementing the following security profile: - Ingestion points: Data enters the application through query parameters in
@MongoRepositoryinterfaces. - Boundary markers: The skill mandates the use of Micronaut's bound-parameter syntax (e.g.,
:parameterName) to prevent data from being interpreted as query logic. - Capability inventory: The skill possesses the ability to execute shell commands via the Maven wrapper for build and test purposes.
- Sanitization: The guidance explicitly prohibits string concatenation in queries, directing the agent to use safe, framework-provided query derivation techniques.
Audit Metadata