java-dev
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to analyze and refactor Java source code provided by the user, which constitutes an ingestion point for untrusted data. Instructions embedded in code comments or string literals could theoretically be interpreted by the agent as high-priority commands.
- Ingestion points: The skill triggers on writing, reviewing, and refactoring Java files (.java), database designs (MySQL), and API implementations.
- Boundary markers: There are no explicit instructions or delimiters provided to the agent to distinguish between the Java code being analyzed and potential natural language instructions embedded within that code.
- Capability inventory: The skill is intended for use in environments where the agent has broad capabilities, including file system access and shell execution, which could be misused if an indirect injection were successful.
- Sanitization: The skill contains no mechanisms to sanitize or filter the input code for potential prompt injection patterns before the agent processes it.
Audit Metadata