ddd4j-project-creator
Pass
Audited by Gen Agent Trust Hub on Apr 2, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes Python scripts (
scripts/init_project.pyandscripts/check_project.py) to automate the creation of project directories and source files. These scripts perform standard filesystem operations such as creating directories and writing project-related files (e.g., pom.xml, Java source files, and configuration scripts) to the local environment, which is aligned with the skill's primary function. - [PROMPT_INJECTION]: The skill's instructions contain operational constraints and trigger guidelines using emphasis markers like "CRITICAL" and "IMPORTANT". These are interpreted as benign structural instructions intended to ensure the agent only activates for specific ddd4j-related requests, rather than attempts to bypass safety protocols or override agent behavior.
- [DATA_EXPOSURE]: The skill does not access sensitive system paths (e.g., credentials or SSH keys) and does not contain hardcoded secrets. Its filesystem operations are restricted to the creation and validation of project scaffolding within the user-specified project directory.
Audit Metadata