gradle-convention-modules
Pass
Audited by Gen Agent Trust Hub on May 18, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a technical reference for Gradle configuration. Analysis of the instructions and reference documentation reveals no security violations or suspicious behaviors.
- [PROMPT_INJECTION]: The skill identifies an indirect prompt injection surface as it interacts with project-specific build files.
- Ingestion points:
settings.gradle.kts,build.gradle.kts, andgradle/libs.versions.toml(SKILL.md, references/validation.md). - Boundary markers: No specific delimiters or safety warnings for processing untrusted build data are present.
- Capability inventory: The skill employs shell execution for Gradle wrapper tasks (
./gradlew) and file system operations to create and modify build logic (references/validation.md). - Sanitization: No explicit sanitization or validation of the ingested Gradle file content is performed within the instructions.
Audit Metadata