spring-boot-engineer
Pass
Audited by Gen Agent Trust Hub on Jun 14, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides structured guidance and code templates for Spring Boot development that follow modern security standards, such as Spring Security 6 and OAuth2/JWT implementation.
- [COMMAND_EXECUTION]: The workflow incorporates standard build tool commands (
./mvnw test,./gradlew test) and Actuator health check validations. These are routine operations for backend development and testing environments and are used appropriately within the defined scope. - [EXTERNAL_DOWNLOADS]: The skill references standard package registries and official documentation sources for Java dependencies and Docker images. All external references are to well-known services or used as placeholders for configuration.
- [CREDENTIALS_UNSAFE]: The instructions explicitly forbid storing secrets or credentials in application configuration files, instead mandating the use of environment variables or Spring Cloud Config, which is a key security best practice for managing sensitive information.
Audit Metadata