spring-boot-skill
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFECREDENTIALS_UNSAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill in
SKILL.mdenables the generation of project structures and source code based on user requirements. While this provides a surface for indirect prompt injection, the implementation relies on structured templates that guide the agent toward safe code patterns. - [EXTERNAL_DOWNLOADS]: The skill in
references/archunit.md,references/spring-data-jpa.md, andreferences/taskfile.mdreferences standard Maven dependencies and tools such ascom.enofex:taikai,io.hypersistence:hypersistence-utils-hibernate-73, and thego-taskutility. These are reputable tools within the Java ecosystem used for automation and quality assurance. - [CREDENTIALS_UNSAFE]: Reference code for integration tests in
references/spring-boot-rest-api-testing.mdincludes hardcoded example credentials (admin@gmail.com/Admin@1234). These are used as sample values for testing purposes in a development context and do not pose a threat to production security.
Audit Metadata