java-development
Pass
Audited by Gen Agent Trust Hub on Nov 1, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill includes an
install.shscript and ascripts/validate-skill.pyscript. These are intended for developer environment setup and skill maintenance. The validator script usessubprocess.run()to execute itself in a temporary directory for regression testing, which is a standard development practice for this type of framework. - [SAFE]: The skill uses established, well-known libraries such as Spring Boot, MyBatis-Plus, JUnit 5, Mockito, and AssertJ. All external references in
metadata.jsonand rule files point to official documentation from trusted sources like Oracle (dev.java), Apache (maven.apache.org), and Spring (docs.spring.io). - [SAFE]: The
install.shscript performs standard filesystem operations (mkdir, ln -s, tar) to install the skill into common AI agent configuration directories (e.g., ~/.claude/skills, ~/.cursor/skills). It contains safety checks to prevent overwriting the source directory.
Audit Metadata