struts-to-spring
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [Architectural Migration Framework]: The skill provides structured mappings for converting legacy Struts 2 components into modern Spring MVC equivalents using standard design patterns.
- Evidence: Files such as
SKILL-action.mdandSKILL-interceptor.mddocument the transition from Struts Actions to Spring Controllers and Interceptors using official Spring annotations. - [Secure Dependency Management]: The guide recommends using official dependencies from well-known and reputable organizations.
- Evidence:
SKILL-config.mdprovides Maven configuration snippets targeting theorg.springframework.bootgroup, which is an established and trusted source for Java development. - [Validation and Security Enhancement]: The skill specifically encourages migrating legacy validation logic to modern, standardized frameworks.
- Evidence:
SKILL-interceptor.mdprovides a direct mapping from Struts validators to Jakarta Bean Validation annotations, promoting robust input handling in the target application. - [Indirect Prompt Injection Surface]: As a code transformation tool, the skill naturally involves processing external data (source code), which represents a theoretical injection surface.
- Ingestion points: Struts Java source files, JSP templates, and XML configuration files (
struts.xml,web.xml). - Boundary markers: The skill uses clearly defined transformation templates and comparison tables to guide the agent, which helps constrain the interpretation of source data.
- Capability inventory: The skill facilitates file reading and writing operations typically used by AI agents to perform automated code migrations.
- Sanitization: The skill relies on structured transformation logic rather than unguided execution of embedded instructions within the source code.
Audit Metadata