quarkus-update

Pass

Audited by Gen Agent Trust Hub on May 22, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes the quarkus update --dry-run command to analyze project status without making permanent changes. It also uses git ls-remote to query version tags from official repositories.
  • [EXTERNAL_DOWNLOADS]: Fetches reference configuration files and structural diffs from official Quarkus repositories hosted on GitHub (github.com/quarkusio/code-with-quarkus-compare).
  • [DATA_EXFILTRATION]: Accesses project build files (pom.xml, build.gradle, build.gradle.kts) and local update reports (target/rewrite/rewrite.patch) to perform structural comparisons and migration analysis. This data remains within the local environment or is compared against official vendor templates.
Audit Metadata
Risk Level
SAFE
Analyzed
May 22, 2026, 05:43 PM
Security Audit — agent-trust-hub — quarkus-update