java-architect
Pass
Audited by Gen Agent Trust Hub on Jun 14, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill directs the agent to utilize standard project-level build tools such as the Maven Wrapper (
./mvnw) and Gradle Wrapper (./gradlew). These commands are used as intended for validating code changes and ensuring test coverage within a development environment. - [EXTERNAL_DOWNLOADS]: Includes configuration for TestContainers that references the official
postgres:16-alpineimage from Docker Hub. This is a well-known service and standard industry practice for automated integration testing. - [PROMPT_INJECTION]: The skill exhibits an inherent surface for indirect prompt injection because it processes untrusted project data (source code, JaCoCo coverage reports) to determine its next steps. While this is an expected behavior for a developer agent, malicious instructions embedded in a project's files could theoretically attempt to influence the agent's output during verification phases.
Audit Metadata