code-review-java
Pass
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides educational content and guidance for security auditing of Java source code. It lists common vulnerable patterns and sinks used in legitimate security research and does not contain any malicious instructions or obfuscation.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to analyze external Java source code, which could potentially contain malicious instructions intended to influence the agent (e.g., instructions hidden in code comments). This is an inherent risk factor for code review tools, but the skill itself provides passive guidance rather than active execution of untrusted input.
Audit Metadata