spring-batch
Pass
Audited by Gen Agent Trust Hub on Aug 11, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill facilitates the ingestion of external data via Job Parameters, which could be exploited for indirect prompt injection or data manipulation if input is not strictly validated.
- Ingestion points: Job parameters are accessed using Spring Expression Language (SpEL) in
SKILL.md(e.g.,@Value("#{jobParameters['status']}")),templates/ChunkJobConfig.java, andexamples/good-batch-config.java. - Boundary markers: No explicit instructions or delimiters are provided to the agent to treat this data as untrusted or to ignore embedded instructions.
- Capability inventory: The skill is designed for bulk data processing, including database writes via
JdbcBatchItemWriterand potential side effects inJobExecutionListenercomponents (emails, webhooks). - Sanitization: Examples include basic sanitization through Java type conversion (e.g.,
OrderStatus.valueOf(status)), but do not specify comprehensive validation for all possible parameter types.
Audit Metadata