323-frameworks-spring-boot-testing-acceptance-tests

Pass

Audited by Gen Agent Trust Hub on Apr 11, 2026

Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill requires the execution of Maven commands (mvn compile, mvn clean verify) to validate the project before and after test generation. This is standard for development skills targeting Java projects.
  • [PROMPT_INJECTION]: The skill is subject to indirect prompt injection as it processes external Gherkin feature files. 1. Ingestion points: Gherkin .feature files are read into the agent context (SKILL.md). 2. Boundary markers (absent): No explicit delimiters or instructions to ignore instructions within the .feature files are provided. 3. Capability inventory: The skill can write files and execute shell commands via Maven (SKILL.md, references/323-frameworks-spring-boot-testing-acceptance-tests.md). 4. Sanitization (absent): There is no mention of sanitizing or escaping the content of the feature files before they are used to generate test code.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 11, 2026, 03:10 PM