build-tools-bump-gradle-in-tests
Pass
Audited by Gen Agent Trust Hub on Jul 30, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is designed for a specific, well-defined administrative task within a development environment, specifically for the JetBrains Kotlin project.
- [COMMAND_EXECUTION]: The skill includes instructions to run local verification tests using the project's own Gradle wrapper (
./gradlew). This is standard practice for validating build configuration changes in Java/Kotlin projects. - [INDIRECT_PROMPT_INJECTION]: The skill ingests a user-provided Gradle version string which is then interpolated into source code files. To mitigate risks, the instructions explicitly mandate input validation, requiring the agent to confirm the version with the user and reject any strings that do not follow the standard
MAJOR.MINOR.PATCHformat. - [DATA_EXPOSURE]: The skill involves reading specific project files (e.g.,
TestVersions.kt,build.gradle.kts) using IDE-integrated tools. These operations are restricted to the local project context and do not involve unauthorized data access or exfiltration.
Audit Metadata