resonate-basic-ephemeral-world-usage-java

Pass

Audited by Gen Agent Trust Hub on Aug 10, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill serves as a legitimate technical resource for developers using the Resonate Java SDK. It provides implementation patterns for workflow registration and invocation.
  • [CREDENTIALS_UNSAFE]: The skill correctly demonstrates using environment variables (RESONATE_TOKEN) for handling authentication tokens rather than hardcoding them, which is a recommended security practice.
  • [EXTERNAL_DOWNLOADS]: References the official io.resonatehq:resonate-sdk-java package from Maven Central. As this is the vendor's own SDK, the dependency is considered standard and safe.
  • [COMMAND_EXECUTION]: Includes standard development commands for Gradle (./gradlew run) and Maven (mvn compile exec:java), which are typical for building and running Java applications.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 10, 2026, 06:42 AM
Security Audit — agent-trust-hub — resonate-basic-ephemeral-world-usage-java