Skills
skills/shigzz/java-class-analyser/java-class-analyzer/Gen Agent Trust Hub

java-class-analyzer

Warn

Audited by Gen Agent Trust Hub on Mar 30, 2026

Risk Level: MEDIUMCOMMAND_EXECUTIONREMOTE_CODE_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The script scripts/scan_dependencies.py executes shell commands to resolve Maven dependencies. It automatically identifies and runs the mvnw script if it is present in the provided project directory.\n- [REMOTE_CODE_EXECUTION]: Because the skill executes the mvnw binary directly from the target project directory, it is susceptible to executing arbitrary malicious code if the project content is attacker-controlled.\n- [COMMAND_EXECUTION]: The script scripts/decompile_class.py invokes external system utilities such as cfr, javap, or a Java archive (JAR) file specified in the CFR_JAR environment variable.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Mar 30, 2026, 01:15 PM