java-spring-api
Pass
Audited by Gen Agent Trust Hub on Aug 6, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides a command to scaffold new projects using Spring Initializr at
https://start.spring.io. This is a well-known and official technology service used by the Java community for generating project templates. - [COMMAND_EXECUTION]: Standard development commands for project builds, testing, and formatting (e.g.,
mvn test,mvn spotless:apply) are provided. These are appropriate for the skill's purpose and restricted to the development environment. - [PROMPT_INJECTION]: The instructions do not contain any patterns intended to override agent behavior, bypass safety filters, or extract system prompts. Instruction language is strictly focused on technical guidance.
- [DATA_EXFILTRATION]: Configuration templates (e.g.,
application.yml) follow security best practices by using environment variable placeholders for sensitive data like database passwords and API keys, rather than hardcoding secrets. - [SAFE]: The skill includes extensive security hardening documentation, covering OWASP dependency scanning, JWT role extraction, HSTS, and secure logging through PII masking.
Audit Metadata