skills/superproxy/springboot-microservice-gen-skills/springboot-microservice-gen/Gen Agent Trust Hub
springboot-microservice-gen
Pass
Audited by Gen Agent Trust Hub on Aug 7, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONCREDENTIALS_UNSAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches the Spring CLI utility from the official spring-attic repository on GitHub (github.com/spring-attic/spring-cli) to generate project files.
- [EXTERNAL_DOWNLOADS]: Downloads the Spring Boot project starter archive from the well-known Spring Initializr service (start.spring.io).
- [EXTERNAL_DOWNLOADS]: The generated Dockerfile includes an instruction to download the SkyWalking Java Agent from the official Apache software archive (archive.apache.org).
- [COMMAND_EXECUTION]: The Python generator script executes system commands via subprocess.run to install the Spring CLI, make scripts executable, and run the Maven wrapper to package the project. On Windows, it utilizes shell=True for compatibility with batch files.
- [CREDENTIALS_UNSAFE]: Templates for local development contain default credentials (e.g., username 'root' and password 'root' for MySQL). These are intended for initial development in a local environment and are explicitly documented.
Audit Metadata