springboot-patterns

Pass

Audited by Gen Agent Trust Hub on Sep 23, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill serves as a technical reference for Spring Boot development, providing architectural templates for controllers, services, repositories, and exception handling. All code samples follow standard enterprise patterns.
  • [INDIRECT_PROMPT_INJECTION]: While the skill provides code patterns for ingesting external data via REST APIs (e.g., @RequestBody, @RequestParam), it demonstrates security best practices by implementing validation constraints (@Valid, @NotBlank, @Size, @FutureOrPresent) to sanitize input. It also includes a comprehensive security warning about IP spoofing via the X-Forwarded-For header and provides correct implementation details for trusted proxies.
  • [COMMAND_EXECUTION]: No shell commands or arbitrary code execution patterns were detected. The provided Java code implements logic for rate limiting, retries, and filtering without using unsafe system calls.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 23, 2026, 09:32 PM