backend-async-microservice

Pass

Audited by Gen Agent Trust Hub on Jul 31, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: No security issues detected. The skill defines a standard organizational structure and implementation pattern for event-driven Spring Boot microservices.
  • [SAFE]: The skill explicitly includes security-positive instructions, such as using jakarta.validation for inbound payloads and specifically warning against logging full event payloads or downstream response bodies that may contain sensitive data.
  • [SAFE]: Indirect Prompt Injection attack surface is acknowledged as the skill's primary purpose involves processing external Kafka and platform event messages. However, the skill mitigates this by instructing developers to validate required payload fields and headers before processing, and by delegating logic to service layers rather than executing raw input.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 31, 2026, 11:19 AM