java-spring-boot
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to analyze and implement Spring Boot code. When performing tasks like 'analyze the current implementation', the agent reads project files which are untrusted ingestion points. While the skill lack explicit boundary markers or sanitization logic for these inputs, it adheres to standard coding assistant patterns and uses restricted tools.
- Ingestion points: User-provided Java files and Spring configuration (referenced in GUIDE.md).
- Boundary markers: Not explicitly defined in SKILL.md.
- Capability inventory: Uses Read, Write, Bash, Glob, and Grep tools (defined in SKILL.md frontmatter).
- Sanitization: None performed on code being analyzed.
- [COMMAND_EXECUTION]: The skill metadata allows access to the
Bashtool. This is consistent with the skill's purpose for Java development workflows (e.g., builds, testing). The included scriptscripts/validate.pydoes not use subprocesses to execute arbitrary commands.
Audit Metadata