spring-boot-engineer
Pass
Audited by Gen Agent Trust Hub on Oct 7, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill incorporates strong security constraints, specifically requiring the externalization of secrets via environment variables or Spring Cloud Config, and explicitly forbidding the storage of credentials in application property files.
- [SAFE]: The provided code templates follow modern security standards, utilizing Spring Security 6, BCrypt password hashing, and CSRF protection for state-changing operations.
- [SAFE]: The skill enforces robust API security practices, such as mandatory input validation using Bean Validation annotations and the use of RFC 7807 Problem Details to avoid leaking internal stack traces to users.
- [SAFE]: References to external repositories and services (such as GitHub config repos and OAuth2 issuers) use generic placeholders for demonstration purposes and do not point to suspicious or untrusted sources.
Audit Metadata