java-style-guide
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The instructions direct the agent to execute local Python scripts (
scripts/resolve_style_guides.pyandscripts/validate_trigger_matrix_sync.py) to manage skill activation and validate project metadata. These scripts were not provided for analysis, and their execution with user-controlled file paths as arguments represents a potential command injection surface. - [INDIRECT_PROMPT_INJECTION]: The skill operates by ingesting and refactoring untrusted Java source code and build configuration files (
pom.xml,build.gradle). This creates a surface where malicious instructions hidden in the code (e.g., in comments or string literals) could potentially influence the agent's behavior. - Ingestion points: Java source files (
.java) and build configuration files (pom.xml,build.gradle,build.gradle.kts). - Boundary markers: The skill does not define specific delimiters or instructions for the agent to ignore embedded commands within the analyzed code.
- Capability inventory: Shell execution of local Python scripts and standard Java build tools (
gradlew,mvn). - Sanitization: No explicit sanitization or validation of the content of the analyzed files is mentioned.
Audit Metadata