sdkman
Pass
Audited by Gen Agent Trust Hub on May 4, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill instructs the agent on how to use SDKMAN to manage environment variables and software versions. It includes specific patterns to ensure the environment is correctly loaded in non-interactive shells.
- [SAFE]: The instructions contain security-focused guidance, explicitly telling the agent to avoid persistent changes (Pattern C) unless requested by the user and to never install new packages (via
sdk install) without prior confirmation. - [SAFE]: The skill correctly handles project-specific configuration through
.sdkmanrcfiles by using the intended tool command (sdk env), rather than interpreting the file content as natural language instructions. - [SAFE]: No malicious patterns such as obfuscation, unauthorized data access, credential harvesting, or remote code execution from untrusted sources were detected.
Audit Metadata