springboot-patterns
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a technical reference for Spring Boot development, providing architectural templates for controllers, services, repositories, and exception handling. All code samples follow standard enterprise patterns.
- [INDIRECT_PROMPT_INJECTION]: While the skill provides code patterns for ingesting external data via REST APIs (e.g.,
@RequestBody,@RequestParam), it demonstrates security best practices by implementing validation constraints (@Valid,@NotBlank,@Size,@FutureOrPresent) to sanitize input. It also includes a comprehensive security warning about IP spoofing via theX-Forwarded-Forheader and provides correct implementation details for trusted proxies. - [COMMAND_EXECUTION]: No shell commands or arbitrary code execution patterns were detected. The provided Java code implements logic for rate limiting, retries, and filtering without using unsafe system calls.
Audit Metadata