gradle-expert

Pass

Audited by Gen Agent Trust Hub on Apr 20, 2026

Risk Level: SAFEREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
  • [REMOTE_CODE_EXECUTION]: The skill describes the setup and use of the Gradle Wrapper, which fetches Gradle distributions from services.gradle.org. This is a well-known service provided by the Gradle organization for distribution management.
  • [COMMAND_EXECUTION]: The documentation includes instructions for implementing Exec and JavaExec tasks. These are standard Gradle features used to run system commands, Docker containers, and Java applications during the build process.
  • [DYNAMIC_EXECUTION]: Gradle utilizes executable DSLs (Kotlin and Groovy) for build logic. The skill provides extensive examples and best practices for writing custom tasks, plugins, and script logic within the buildSrc directory.
  • [PROMPT_INJECTION]: The skill acts as an expert that analyzes and generates build scripts. It possesses an inherent surface for indirect prompt injection if it is used to process untrusted project data or malicious build configurations provided within a user's repository.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 20, 2026, 11:27 AM
Security Audit — agent-trust-hub — gradle-expert