jackson-kotlin-serialization-specialist
Pass
Audited by Gen Agent Trust Hub on Oct 6, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data, such as DTO source code and JSON payloads, creating a surface for potential indirect prompt injection attacks.
- Ingestion points: DTO/event model classes, JSON payloads, ObjectMapper customizers, and build files specified in the Read First section.
- Boundary markers: The instructions lack explicit delimiters or safety instructions to distinguish between the skill's operational logic and the data being analyzed.
- Capability inventory: The skill's primary function is to provide textual analysis and design recommendations; it does not define tools for external network access or file system modification.
- Sanitization: No procedures are described for sanitizing or validating the input data before it is processed by the agent.
Audit Metadata