hexagonal-architecture
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill content is purely instructional, providing templates and examples for Hexagonal Architecture (Ports and Adapters) in Java/Spring Boot projects. It focuses on the separation of business logic from infrastructure frameworks.
- [REMOTE_CODE_EXECUTION]: Analysis found no evidence of remote script downloads, piped execution, or installation of untrusted packages. All scripts and templates are static Java files.
- [DATA_EXFILTRATION]: The skill does not access sensitive system files (e.g., credentials, SSH keys, or environment variables) and does not perform network operations to untrusted external domains. The use of an internal service URL ('http://inventory-service/reserve') in bad-use-case.java is a benign placeholder for teaching microservice communication.
- [OBFUSCATION]: No hidden content, base64-encoded strings, zero-width characters, or homoglyph attacks were identified in the skill files or metadata.
Audit Metadata