spring-data-redis
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill uses environment variable placeholders for sensitive configuration like Redis passwords, preventing credential exposure.\n- [SAFE]: It employs BasicPolymorphicTypeValidator to secure Jackson JSON deserialization, effectively mitigating potential Remote Code Execution (RCE) vulnerabilities associated with polymorphic type handling.\n- [SAFE]: The rate limiting implementation uses atomic Lua scripts to avoid scenarios where interrupted operations could lead to keys lacking expiration, which would result in a permanent denial of service for the targeted identifier.\n- [SAFE]: The documentation includes 'Gotchas' that warn against using Java serialization and insecure default typing, promoting industry security best practices.
Audit Metadata