Skills
skills/pluginagentmarketplace/custom-plugin-java/java-fundamentals/Gen Agent Trust Hub

java-fundamentals

Pass

Audited by Gen Agent Trust Hub on Feb 15, 2026

Risk Level: LOW
Full Analysis
  • [SAFE] (SAFE): No malicious patterns were identified across the 10 threat categories.
  • [COMMAND_EXECUTION] (INFO): The skill metadata in SKILL.md declares Bash as an allowed tool. This is a standard capability for developer-oriented skills, and the provided validation scripts do not abuse this privilege.
  • [REMOTE_CODE_EXECUTION] (SAFE): The script scripts/validate.py correctly uses yaml.safe_load() to process configuration data, mitigating potential unsafe deserialization vulnerabilities.
Audit Metadata
Risk Level
LOW
Analyzed
Feb 15, 2026, 09:08 PM