java-decompile

Pass

Audited by Gen Agent Trust Hub on Mar 25, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill uses jbang to download and execute the org.vineflower:vineflower decompiler. This is an expected operation for a tool designed to decompile Java bytecode and utilizes standard package resolution.- [COMMAND_EXECUTION]: The skill provides instructions to execute several shell commands including find, grep, cat, jar, and mvn to locate JAR files and extract/view class contents. These operations are scoped to the developer's local environment and project dependencies.- [DATA_EXPOSURE]: The skill accesses the local Maven repository (~/.m2/repository) and project build directories (target/classes) to find Java class files. This access is necessary for the skill's primary function and does not involve sensitive configuration or credential files.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 25, 2026, 10:28 AM
Security Audit — agent-trust-hub — java-decompile