spring-boot-engineer
Pass
Audited by Gen Agent Trust Hub on Apr 29, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The core workflow instructs the agent to execute standard build tool commands (
./mvnw testor./gradlew test) to verify implementation. This is appropriate for a software engineering skill. - [SAFE]: The provided security reference implementation follows best practices, including using BCrypt with a recommended cost factor (12) and implementing stateless JWT-based authentication.
- [SAFE]: The skill includes strict constraints against hardcoding secrets or credentials in configuration files, enforcing the use of environment variables for sensitive data.
- [SAFE]: Reference templates for REST controllers include mandatory input validation (
@Valid,@NotBlank) and global exception handling to prevent sensitive data leakage via stack traces.
Audit Metadata