jdtls-lsp
Pass
Audited by Gen Agent Trust Hub on Nov 3, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious instructions, hidden commands, or unauthorized data access patterns were identified in the skill. The installation steps and workflow examples use standard system package managers and benign binary flags (e.g., --version).
- [INDIRECT_PROMPT_INJECTION]: The skill defines an attack surface for indirect prompt injection as it is designed to analyze external source code. 1. Ingestion points: .java files (referenced in SKILL.md). 2. Boundary markers: Absent. 3. Capability inventory: run_command (executing jdtls). 4. Sanitization: Absent. This surface is inherent to the primary purpose of a language server skill and does not represent an active threat.
Audit Metadata