cwe-532-sensitive-info-in-logs
Pass
Audited by Gen Agent Trust Hub on Mar 6, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides educational patterns and code snippets for identifying and fixing Sensitive Information in Logs (CWE-532) in Java projects.
- [COMMAND_EXECUTION]: Includes a standard grep utility command intended for local use by a developer to identify potential logging vulnerabilities in source code.
- [EXTERNAL_DOWNLOADS]: Contains links to the official MITRE CWE documentation and the author's GitHub repository for reference and project attribution.
Audit Metadata