122-java-type-design
Pass
Audited by Gen Agent Trust Hub on Mar 6, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute
mvn compileand./mvnw clean verify. These commands are used to validate refactoring but involve running build scripts and tests within the project's local environment. - [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection through the analysis of external code files.
- Ingestion points: Java source files and local Maven wrapper scripts.
- Boundary markers: No delimiters or protective instructions are provided to help the agent distinguish between code logic and malicious natural language instructions.
- Capability inventory: The skill has the authority to execute shell commands to compile and test code.
- Sanitization: No sanitization or validation of the input source code is performed before the execution of build commands.
Audit Metadata