sast-spotbugs
Pass
Audited by Gen Agent Trust Hub on Aug 27, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses shell commands for Maven (
mvn) and the SpotBugs CLI to perform static analysis. These are standard operations for a SAST tool and are constrained to the intended purpose of code scanning. - [INDIRECT_PROMPT_INJECTION]: The skill ingests and processes reports generated from external Java source code. This represents a potential surface for indirect prompt injection if the scanned code contains adversarial content designed to influence the AI agent.
- Ingestion points: Processes output from
spotbugs-results.xmlas described in Step 3 of SKILL.md. - Boundary markers: No specific delimiters or instructions to ignore embedded commands within the scan results are provided.
- Capability inventory: The skill is primarily focused on data reporting and does not autonomously execute high-privilege actions (like file writes or network calls) based on the scan findings.
- Sanitization: No evidence of sanitization or validation of the scanner output is specified before interpolation into the prompt.
Audit Metadata