configuration-properties-profiles-kotlin-safe
Pass
Audited by Gen Agent Trust Hub on Sep 29, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is purely instructional and diagnostic, focusing on Spring Boot configuration binding and profile management in Kotlin. It does not perform any dangerous operations such as command execution, network access, or file modification.
- [CREDENTIALS_SAFE]: The instructions include explicit guardrails forbidding the hardcoding of secrets or defaulting required credentials to empty strings, which is a positive security practice.
- [INDIRECT_PROMPT_INJECTION]: While the skill analyzes external configuration data (YAML, properties, environment variables), it lacks any executable capabilities (no subprocess calls, no network exfiltration, no file-write tools) that could be leveraged by an indirect prompt injection attack. The risk is negligible.
Audit Metadata