spring-boot-init
Pass
Audited by Gen Agent Trust Hub on Oct 4, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches project templates from the official Spring Initializr service at https://start.spring.io. Evidence: The download_project function in scripts/create_project.py handles the download process from the specified URL. Context: This download targets a well-known and trusted service provided by the Spring ecosystem for project initialization.
- [INDIRECT_PROMPT_INJECTION]: The skill accepts user-supplied parameters to customize the generated project, creating a surface for potential indirect prompt injection. 1. Ingestion points: User inputs provided via command-line arguments to scripts/create_project.py (e.g., project name, dependencies, group ID). 2. Boundary markers: The script utilizes urllib.parse.urlencode to safely encode user inputs into the request URL. 3. Capability inventory: The script performs network requests (urlopen) and write files to the local disk (zipfile.extractall). 4. Sanitization: User inputs are sanitized through URL encoding, and the script includes logic to normalize artifact and package names to valid formats.
Audit Metadata