spring-ai

Pass

Audited by Gen Agent Trust Hub on Feb 17, 2026

Risk Level: SAFENO_CODE
Full Analysis
  • Prompt Injection (SAFE): No instructions designed to override agent behavior, bypass safety filters, or extract system prompts were found.\n- Data Exposure & Exfiltration (SAFE): No sensitive file access or hardcoded credentials were detected. The skill correctly uses placeholders like ${OPENAI_API_KEY} in configuration examples.\n- Obfuscation (SAFE): No encoded content, multi-layered Base64, zero-width characters, or homoglyphs were identified in the text or code samples.\n- Unverifiable Dependencies & Remote Code Execution (SAFE): The skill references standard, well-known Spring AI dependencies (org.springframework.ai). There are no commands for downloading or executing remote scripts.\n- Indirect Prompt Injection (SAFE): Although the documentation demonstrates how to interpolate user inputs into prompts, the skill itself does not process runtime data or provide any exploitable surface to the agent environment.\n- NO_CODE (SAFE): The skill consists entirely of documentation and does not define any tools, functions, or executable code that would run in the agent's host environment.
Audit Metadata
Risk Level
SAFE
Analyzed
Feb 17, 2026, 05:21 PM