gradle-expert
Pass
Audited by Gen Agent Trust Hub on Apr 20, 2026
Risk Level: SAFEREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill describes the setup and use of the Gradle Wrapper, which fetches Gradle distributions from
services.gradle.org. This is a well-known service provided by the Gradle organization for distribution management. - [COMMAND_EXECUTION]: The documentation includes instructions for implementing
ExecandJavaExectasks. These are standard Gradle features used to run system commands, Docker containers, and Java applications during the build process. - [DYNAMIC_EXECUTION]: Gradle utilizes executable DSLs (Kotlin and Groovy) for build logic. The skill provides extensive examples and best practices for writing custom tasks, plugins, and script logic within the
buildSrcdirectory. - [PROMPT_INJECTION]: The skill acts as an expert that analyzes and generates build scripts. It possesses an inherent surface for indirect prompt injection if it is used to process untrusted project data or malicious build configurations provided within a user's repository.
Audit Metadata