gatling-best-practices
Pass
Audited by Gen Agent Trust Hub on Mar 15, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill includes a validation script (
scripts/validate.sh) that the agent executes to scan user-provided projects for configuration errors. This script uses standard, non-executable utilities such asgrep,find, andcatto perform static analysis on the project structure.- [EXTERNAL_DOWNLOADS]: The scaffolding script (scripts/scaffold.sh) generates configuration to download the Gradle build tool from its official domain (services.gradle.org). This is a well-known service and a standard practice for JVM-based development.- [PROMPT_INJECTION]: The skill processes user-supplied Gatling simulation files and project metadata, which constitutes an indirect prompt injection surface. - Ingestion points: Simulation source files and build configurations (pom.xml, build.gradle, package.json) read by
scripts/validate.sh. - Boundary markers: No specific delimiters are used in the prompt templates.
- Capability inventory: Limited to filesystem reads and text search operations.
- Sanitization: The skill performs static checks without executing the content of the user-provided files.
Audit Metadata