516-frameworks-micronaut-mongodb-migrations-mongock
Pass
Audited by Gen Agent Trust Hub on Sep 26, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill requires the agent to execute local build tool commands (
./mvnw compile,mvn clean verify) to ensure the integrity of the project before and after applying data migrations. These are standard developer operations for Java-based projects. - [INDIRECT_PROMPT_INJECTION]: The skill has a potential attack surface for indirect prompt injection because it processes untrusted project files and has the capability to execute shell commands.
- Ingestion points: The workflow involves reading the project's
pom.xml, Micronaut configuration files, and existing Java migration source code. - Boundary markers: The instructions do not define specific delimiters or instructions to ignore embedded content within the ingested files.
- Capability inventory: The skill utilizes the Maven wrapper or installed Maven binary to compile and verify the project.
- Sanitization: There is no explicit sanitization of the contents read from the project files before they are interpreted.
- [EXTERNAL_DOWNLOADS]: The skill references standard dependencies from the Maven Central repository, including io.mongock, io.micronaut.mongodb, and Testcontainers. These are well-known, industry-standard libraries for the described use case.
Audit Metadata