java-kotlin
Pass
Audited by Gen Agent Trust Hub on Jul 16, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns, obfuscation, or unauthorized access attempts were detected. The skill focuses on providing best practices for Java and Kotlin development, including the use of records, sealed interfaces, and coroutines.
- [INDIRECT_PROMPT_INJECTION]: The skill identifies 'Source module' and 'build file' as inputs (SKILL.md). This is a standard surface for indirect prompt injection if an attacker embeds instructions in source code comments or build metadata. However, the skill lacks dangerous capabilities that would allow an attacker to exploit this surface beyond typical code analysis tasks.
- Ingestion points: Source code modules and build configuration files (Maven/Gradle) identified in the 'Inputs' section.
- Boundary markers: None identified in the instructions.
- Capability inventory: The skill outlines a 'Gate' workflow involving static analysis (SpotBugs/detekt) and test execution, which are standard development practices.
- Sanitization: No specific sanitization or validation of the input source code is described beyond standard compilation and linting.
Audit Metadata