java-decompile
Pass
Audited by Gen Agent Trust Hub on Mar 25, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill uses
jbangto download and execute theorg.vineflower:vineflowerdecompiler. This is an expected operation for a tool designed to decompile Java bytecode and utilizes standard package resolution.- [COMMAND_EXECUTION]: The skill provides instructions to execute several shell commands includingfind,grep,cat,jar, andmvnto locate JAR files and extract/view class contents. These operations are scoped to the developer's local environment and project dependencies.- [DATA_EXPOSURE]: The skill accesses the local Maven repository (~/.m2/repository) and project build directories (target/classes) to find Java class files. This access is necessary for the skill's primary function and does not involve sensitive configuration or credential files.
Audit Metadata