121-java-object-oriented-design
Pass
Audited by Gen Agent Trust Hub on Mar 6, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute
./mvnw compileormvn compile. Running local wrapper scripts likemvnwpresents a security risk if the codebase being analyzed is malicious, as these scripts can execute arbitrary code on the host system. - [PROMPT_INJECTION]: The skill is vulnerable to indirect prompt injection because it processes user-provided Java source files without using delimiters or sanitization.
- Ingestion points: Java source files and project structure.
- Boundary markers: None identified.
- Capability inventory: Execution of shell commands (Maven) and file system modification (refactoring).
- Sanitization: No validation or filtering is performed on the input code to prevent embedded instructions.
Audit Metadata