spring-boot-engineer
Pass
Audited by Gen Agent Trust Hub on Aug 23, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides standard architectural patterns for Spring Boot 3.x, prioritizing secure-by-default configurations such as CSRF protection via CookieCsrfTokenRepository and password hashing with BCryptPasswordEncoder.
- [COMMAND_EXECUTION]: The workflow includes executing standard build tools (./mvnw test, ./gradlew test). These actions are properly scoped to testing and validation within the local development environment and follow standard software engineering practices.
- [DATA_EXPOSURE]: The instructions mandate the externalization of sensitive data, such as API keys and database credentials, through environment variables or Spring Cloud Config, preventing accidental exposure in source code or configuration files.
Audit Metadata