spring-security-configurator-auditor
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides purely instructional guidance for developers to audit Spring Security configurations. It does not contain any executable code, external scripts, or network operations.
- [SAFE]: The instructions promote high-security standards, specifically warning against insecure defaults such as disabling CSRF without rationale, overly broad matchers, and exposed actuator/diagnostic endpoints.
- [SAFE]: The skill operates entirely on the provided application context to identify potential misconfigurations in authentication and authorization logic.
Audit Metadata