112-java-maven-plugins

Pass

Audited by Gen Agent Trust Hub on Apr 23, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes standard Maven commands (such as mvn test, mvn verify, and mvn wrapper:wrapper) and Java execution for benchmarks. These are intended behaviors for a development-focused skill and do not pose a security threat.
  • [SAFE]: The skill requires a mandatory validation check using mvn validate before and after modifications to ensure the project remains in a stable state.
  • [SAFE]: It employs strict preservation rules to identify and protect existing pom.xml configurations, requiring user confirmation before any conflicting properties or plugins are updated.
  • [SAFE]: External integrations, such as security scanning with OWASP and code quality analysis with Sonar, use official plugins and follow standard industry patterns for configuration and credential handling.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 23, 2026, 06:06 PM