spring-boot-in-action
Pass
Audited by Gen Agent Trust Hub on Oct 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process and analyze external Java source code and configuration files provided by the user, creating an indirect prompt injection surface where malicious instructions could be embedded in the analyzed data.
- Ingestion points: External code is ingested through the agent's context and the
review.pyscript located in thescripts/directory. - Boundary markers: The skill instructions do not specify the use of delimiters or explicit boundary markers to separate user-provided code from the agent's primary system instructions.
- Capability inventory: The skill allows the agent to read files, suggest code modifications, and generate new Spring Boot projects, which could be influenced by instructions hidden within analyzed code.
- Sanitization: No sanitization or filtering of the input code is performed by the
review.pyscript beyond regex-based pattern matching for Spring Boot anti-patterns.
Audit Metadata