search-spring
Pass
Audited by Gen Agent Trust Hub on May 20, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security issues detected in the provided skill. The content consists of standard Java Spring Boot code templates and configuration examples for search integration.
- [DATA_EXPOSURE]: The configuration section correctly uses environment variable placeholders (e.g.,
${ES_PASSWORD:}) rather than hardcoding credentials, which is a secure practice. - [INDIRECT_PROMPT_INJECTION]: The skill implements a search surface that processes user-provided strings. The implementation uses the Elasticsearch Java Client's fluent API (e.g.,
MultiMatchQuery,TermQuery) and Spring Data Repository's@Querywith parameter placeholders (?0), which are resistant to query injection attacks by design.
Audit Metadata