spring-boot-4-migration
Pass
Audited by Gen Agent Trust Hub on Mar 26, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill's primary function is to serve as an advisory migration guide for Java developers. It contains extensive reference material and documentation.
- [COMMAND_EXECUTION]: The skill includes a shell script
scripts/verify-migration.sh. This script is designed to be executed locally to check the project's state, including Java version, Spring Boot version, and the presence of deprecated starters or imports. It uses standard shell utilities likegrep,sed, andcutfor static analysis of build files and source code. - [EXTERNAL_DOWNLOADS]: The documentation references official Spring and OpenRewrite resources. These are well-known and trusted technology services and organizations.
- [PROMPT_INJECTION]: The skill has the surface area for indirect prompt injection as it processes untrusted user-provided project files (Java source, build configurations) to generate migration advice. 1. Ingestion points: Project build files and Java source code. 2. Boundary markers: Absent. 3. Capability inventory: Execution of local verification script and project build tools. 4. Sanitization: Absent. The risk is assessed as low based on the intended developer use-case.
Audit Metadata