springboot-verification
Pass
Audited by Gen Agent Trust Hub on Jun 24, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill documents standard software development lifecycle (SDLC) practices for Spring Boot projects. It utilizes common tools such as Maven, Gradle, and Git, along with established plugins like OWASP Dependency Check, SpotBugs, and JaCoCo, for their intended verification purposes.
- [COMMAND_EXECUTION]: The skill suggests running local build and test commands (e.g.,
mvn clean verify,mvn test,./gradlew assemble). These are routine developer actions for software verification and are conducted on the user's local project files without involving untrusted remote execution or privilege escalation. - [DATA_EXFILTRATION]: The skill includes instructions to search for sensitive patterns (such as
password,api_key, orsk-) usinggrep. This is a defensive security measure intended to help developers find and remove hardcoded secrets from their own codebases before a pull request or release, rather than an attempt to exfiltrate data.
Audit Metadata