dto-validation-analyzer
Pass
Audited by Gen Agent Trust Hub on Jun 22, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it ingests and processes untrusted external data.
- Ingestion points: The skill reads JSON data and Java DTO definitions provided by the user, either as text or via file paths (documented in SKILL.md under '操作步骤').
- Boundary markers: The instructions do not define clear delimiters or specific warnings to ignore instructions embedded within the user-provided data.
- Capability inventory: The skill performs textual analysis and reporting; it does not explicitly invoke subprocesses, network tools, or file-writing capabilities in its core logic.
- Sanitization: There is no mention of escaping or sanitizing the input data before it is processed by the agent's logic.
Audit Metadata