spring-batch

Pass

Audited by Gen Agent Trust Hub on Aug 11, 2026

Risk Level: SAFEPROMPT_INJECTION
Full Analysis
  • [PROMPT_INJECTION]: The skill facilitates the ingestion of external data via Job Parameters, which could be exploited for indirect prompt injection or data manipulation if input is not strictly validated.
  • Ingestion points: Job parameters are accessed using Spring Expression Language (SpEL) in SKILL.md (e.g., @Value("#{jobParameters['status']}")), templates/ChunkJobConfig.java, and examples/good-batch-config.java.
  • Boundary markers: No explicit instructions or delimiters are provided to the agent to treat this data as untrusted or to ignore embedded instructions.
  • Capability inventory: The skill is designed for bulk data processing, including database writes via JdbcBatchItemWriter and potential side effects in JobExecutionListener components (emails, webhooks).
  • Sanitization: Examples include basic sanitization through Java type conversion (e.g., OrderStatus.valueOf(status)), but do not specify comprehensive validation for all possible parameter types.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 11, 2026, 02:12 AM
Security Audit — agent-trust-hub — spring-batch