java-api-endpoints
Pass
Audited by Gen Agent Trust Hub on Nov 11, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: No malicious patterns were identified. The skill is entirely instructional and promotes industry-standard security practices for Java application development.\n- [EXTERNAL_DOWNLOADS]: References to official Spring Framework documentation on
docs.spring.ioare included for developer context. These originate from a well-known and trusted technology provider.\n- [INDIRECT_PROMPT_INJECTION]: The skill defines a surface for processing untrusted user input during code generation. Evidence chain:\n - Ingestion points: User-provided endpoint requirements and project context (SKILL.md).\n
- Boundary markers: None explicitly defined in the skill for generated code.\n
- Capability inventory: File system modification and code generation via agent tools.\n
- Sanitization: The skill mitigates risks by requiring explicit input validation and DTO mapping to prevent the processing or leakage of raw internal data.
Audit Metadata