code-style

Pass

Audited by Gen Agent Trust Hub on Oct 2, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to read and apply settings from project files such as .editorconfig and other internal documentation. This creates a surface where external data is ingested into the agent's context, which is a standard operational requirement for a code-style skill.
  • Ingestion points: SKILL.md (reads .editorconfig), references/modern-java.md (reads user-provided code and referenced internal markdown files).
  • Boundary markers: None; the skill operates under the assumption that the project files are legitimate components of the user's workspace.
  • Capability inventory: None; this skill does not request or use tools for network access, file system modifications, or arbitrary command execution.
  • Sanitization: Not applicable, as the skill only provides formatting and language-idiom guidance.
  • [EXTERNAL_DOWNLOADS]: The skill contains references to external technical documentation, including official Oracle Java documentation and a specific GitHub repository for Java modernization guidelines. These are provided for attribution and developer reference and do not involve the download or execution of scripts at runtime.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 2, 2026, 08:23 AM