eliteforge-java-coding-spec

Pass

Audited by Gen Agent Trust Hub on Mar 19, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill instructs the agent to use tools like cat, rg (ripgrep), and sed to navigate and read its own local documentation files (references/toc.md and references/java-coding-spec-v1.md). These commands are scoped to the skill's internal files and are used specifically to provide accurate citations and code examples to the user.
  • [SAFE]: All external references and naming conventions (e.g., cn.cisdigital.*, cisdigital-elite-forge-*) align with the official vendor resources of CloudSen (CisDigital). Technical prohibitions within the coding spec (e.g., forbidding the use of hutool or RestTemplate) are standard architectural constraints for a specific development environment and do not pose a security risk to the agent or user.
  • [SAFE]: Documentation examples use appropriate placeholders for sensitive information (e.g., <host>, torna地址, appToken) rather than hardcoded credentials or real endpoints.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 19, 2026, 03:38 AM