code-style
Pass
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to read and apply settings from project files such as
.editorconfigand other internal documentation. This creates a surface where external data is ingested into the agent's context, which is a standard operational requirement for a code-style skill. - Ingestion points:
SKILL.md(reads.editorconfig),references/modern-java.md(reads user-provided code and referenced internal markdown files). - Boundary markers: None; the skill operates under the assumption that the project files are legitimate components of the user's workspace.
- Capability inventory: None; this skill does not request or use tools for network access, file system modifications, or arbitrary command execution.
- Sanitization: Not applicable, as the skill only provides formatting and language-idiom guidance.
- [EXTERNAL_DOWNLOADS]: The skill contains references to external technical documentation, including official Oracle Java documentation and a specific GitHub repository for Java modernization guidelines. These are provided for attribution and developer reference and do not involve the download or execution of scripts at runtime.
Audit Metadata