springboot-security
Pass
Audited by Gen Agent Trust Hub on Aug 25, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a documentation and guideline resource for Spring Boot security best practices. It provides code examples for implementing common security controls such as JWT authentication, role-based access control, input validation, and rate limiting.
- [DATA_EXPOSURE]: No hardcoded credentials or sensitive file paths were found. The skill explicitly warns against hardcoding secrets and demonstrates the use of environment variable placeholders (e.g.,
${DB_PASSWORD}). - [COMMAND_EXECUTION]: The skill does not contain any shell commands, subprocess calls, or instructions for the agent to execute arbitrary system commands.
- [REMOTE_CODE_EXECUTION]: There are no patterns involving remote script downloads or execution from external sources. References to security tools like Snyk and OWASP Dependency Check are mentioned as conceptual best practices for the user, not as executed actions by the skill.
- [PROMPT_INJECTION]: No prompt injection attempts, role-play instructions, or safety filter bypasses were detected in the instructions.
- [OBFUSCATION]: The content is clear and uses standard Markdown and Java syntax. No hidden characters, Base64 encoding, or homoglyph substitutions were identified.
Audit Metadata