spring-boot-skill

Pass

Audited by Gen Agent Trust Hub on Mar 10, 2026

Risk Level: SAFECREDENTIALS_UNSAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [CREDENTIALS_UNSAFE]: Hardcoded example credentials are included in boilerplate code snippets intended for testing and local development environment setup.
  • Evidence in references/spring-boot-rest-api-testing.md: The BaseIT class template contains hardcoded strings ADMIN_PASSWORD = "Admin@1234" and USER_PASSWORD = "Siva@1234".
  • Evidence in references/spring-boot-docker-compose.md: The PostgreSQL service configuration uses POSTGRES_PASSWORD: postgres.
  • [COMMAND_EXECUTION]: The skill provides a Taskfile.yml configuration for the Task utility that automates several development tasks through shell commands.
  • Executed commands include ./mvnw (Maven Wrapper), docker compose, sleep, and timeout for building, starting, and stopping services.
  • [EXTERNAL_DOWNLOADS]: The guidelines reference several external dependencies and container images from public registries.
  • Maven dependencies are fetched from registries like Maven Central, and Docker images (such as postgres, redis, grafana/otel-lgtm, and axllent/mailpit) are fetched from Docker Hub.
  • The Maven configuration in references/spring-boot-maven-config.md includes the git-commit-id-maven-plugin, which is configured to include the developer's username and commit messages in the application metadata.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 10, 2026, 09:11 AM