java-framework-audit
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill consists of Markdown documentation and reference materials designed to guide an AI agent through a security audit of Java applications. All code snippets provided are illustrative examples of either common vulnerabilities or their secure counterparts.\n- [INDIRECT_PROMPT_INJECTION]: The skill involves analyzing untrusted Java source code, which is an inherent surface for indirect prompt injection. A malicious codebase could contain instructions within comments or metadata intended to influence the auditing agent's behavior during the audit process.\n
- Ingestion points: The skill guides the analysis of external project files including .java, .xml, and .yml files.\n
- Boundary markers: The instructions do not define specific delimiters to isolate untrusted code content from agent instructions.\n
- Capability inventory: The agent using this skill typically has access to file reading and search tools to process the audited code.\n
- Sanitization: No explicit sanitization or validation of the audited code content is described in the skill instructions.
Audit Metadata