conventions
Pass
Audited by Gen Agent Trust Hub on Nov 5, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill provides architectural guidelines for Spring Boot applications, including mandatory rules like constructor injection and the use of Java records for DTOs.\n- [SAFE]: No obfuscation, prompt injection attempts, or remote code execution patterns were detected in the instructions or metadata.\n- [INDIRECT_PROMPT_INJECTION]: The skill ingests project-specific data by checking for existing CI configurations (e.g., .github/workflows/) and API contract files (e.g., docs/API-CONTRACT.md) in SKILL.md. While boundary markers and sanitization are absent, the capability inventory is limited to standard code generation instructions, resulting in a safe assessment.\n- [SAFE]: The metadata and group ID conventions (pl.piomin.services) align with the authorized author context and intended development purpose.
Audit Metadata