java-frontend-audit
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFENO_CODE
Full Analysis
- [SAFE]: The skill provides comprehensive instructional content and reference patterns for auditing Java source code. It accurately describes common vulnerability sinks and security best practices for Java web frameworks.
- [NO_CODE]: No executable scripts, binary files, or external package dependencies are included in the skill. The analysis is limited to Markdown-based guidance.
- [INDIRECT_PROMPT_INJECTION]: While the skill is designed to ingest and process data from external sources (e.g.,
java-audit-pipelineoutput and Java source code), it lacks any high-privilege capabilities such as file system writes, network requests, or subprocess execution that could be exploited via malicious code in the processed data. The risk of indirect injection is negligible. - [METADATA_POISONING]: The metadata fields (name, description, tags) are consistent with the technical content of the skill and do not contain deceptive instructions.
Audit Metadata