web-mvc
Pass
Audited by Gen Agent Trust Hub on Jul 6, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: The layout example includes script references for 'htmx.org' and 'alpinejs' hosted on well-known CDNs (unpkg.com and jsdelivr.net). These are standard delivery methods for these front-end libraries.
- [SAFE]: The skill provides explicit security warnings against using 'th:inline=javascript' in Thymeleaf templates to avoid XSS injection risks, demonstrating a security-first approach to the provided boilerplate.
- [SAFE]: The use of 'thymeleaf-extras-springsecurity6' is recommended for managing authorization, which is the standard and secure way to handle access control in Spring-based web applications.
Audit Metadata