skills/giuseppe-trisciuoglio/developer-kit-claude-code/langchain4j-spring-boot-integration/Gen Agent Trust Hub
langchain4j-spring-boot-integration
Pass
Audited by Gen Agent Trust Hub on Feb 23, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a documentation-based resource providing integration patterns and code examples. All identified behaviors align with its primary purpose of AI development assistance.
- [DATA_EXPOSURE_AND_EXFILTRATION]: The skill promotes secure credential management by demonstrating the use of Spring property placeholders (e.g.,
${OPENAI_API_KEY}) andSystem.getenv()instead of hardcoding secrets. - [EXTERNAL_DOWNLOADS]: All referenced dependencies, such as
langchain4j-spring-boot-starter, are well-known, official packages from the LangChain4j project distributed through standard Maven and Gradle repositories. - [PROMPT_INJECTION]: Examples in the documentation utilize
@SystemMessageand@UserMessagetemplates correctly to define AI behavior and constraints, which is a standard practice for mitigating direct prompt injection. - [INDIRECT_PROMPT_INJECTION]: The skill demonstrates patterns for ingesting user data (e.g., customer inquiry handling). While this defines an attack surface for the resulting application, the documentation includes remediation guidance such as validating AI-generated outputs and using system messages for behavioral constraints.
Audit Metadata