jspecify-skill
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns or security vulnerabilities were detected. The skill performs standard software development tasks related to Java project configuration.
- [EXTERNAL_DOWNLOADS]: The skill references standard Maven and Gradle dependencies from reputable sources, including JSpecify, Google (Error Prone), Uber (NullAway), and OpenRewrite. These are well-known libraries in the Java ecosystem used for static analysis and code migration.
- [COMMAND_EXECUTION]: The skill includes a local Python script,
scripts/verify_nullmarked.py, designed to verify the presence of nullability annotations in Java packages. Analysis of this script shows it only performs read-only filesystem operations and regular expression matching on source code; it does not execute arbitrary code or perform network operations.
Audit Metadata