springboot-security
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a comprehensive educational resource for securing Spring Boot applications. All code snippets follow industry-standard security practices.
- [CREDENTIALS_SAFE]: The skill explicitly advises against hardcoding secrets, showing examples of using environment variables and vault integrations. Placeholder secrets used in "BAD" examples are clearly labeled and pose no risk.
- [COMMAND_EXECUTION]: No unauthorized or suspicious command execution patterns were detected. The provided code involves standard Spring Security filters and configuration.
- [DATA_EXFILTRATION]: The skill does not contain any data exfiltration vectors. The URLs used in examples (e.g.,
vault.example.com,app.example.com) are generic placeholders for configuration purposes. - [PROMPT_INJECTION]: The content consists of technical guidelines and does not include any instructions designed to subvert the AI agent's behavior or safety protocols.
- [EXTERNAL_DOWNLOADS]: The skill references reputable security tools like OWASP Dependency Check and Snyk, which are standard for secure development lifecycles.
Audit Metadata