spring-boot-testing
Warn
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: MEDIUMMETADATA_POISONINGINDIRECT_PROMPT_INJECTION
Full Analysis
- [METADATA_POISONING]: The skill provides deceptive and misleading information regarding the state of the software ecosystem and its own capabilities.
- Evidence: The skill claims to be an expert in "Spring Boot 4.0", "Spring Framework 7", "JUnit 6", and "Java 25" across several files (SKILL.md, references/sb4-migration.md).
- Finding: As of current stable releases, Spring Boot 4.0, Spring Framework 7, and Java 25 have not been released. JUnit 6 is likewise not a current stable version.
- Impact: Misrepresenting software versions can cause an AI agent to hallucinate non-existent features (e.g., "Context pausing" in Spring Framework 7) or generate code that is incompatible with actual production environments.
- [INDIRECT_PROMPT_INJECTION]: The skill creates an attack surface for processing untrusted data (user code) without implementing boundary protection or sanitization.
- Ingestion points: The skill is designed to ingest and analyze user-provided Java code to suggest refactoring or generate unit tests (SKILL.md).
- Boundary markers: Absent. There are no instructions or delimiters provided to the agent to ensure it ignores instructions that might be embedded within the user's code comments or metadata.
- Capability inventory: The agent has the capability to generate executable Java code and suggest significant structural changes to a user's codebase.
- Sanitization: Absent. User-provided code is processed directly as part of the reasoning loop without filtering or escaping of potential malicious prompts embedded in code comments.
Audit Metadata