spring-ai
Pass
Audited by Gen Agent Trust Hub on Feb 17, 2026
Risk Level: SAFENO_CODE
Full Analysis
- Prompt Injection (SAFE): No instructions designed to override agent behavior, bypass safety filters, or extract system prompts were found.\n- Data Exposure & Exfiltration (SAFE): No sensitive file access or hardcoded credentials were detected. The skill correctly uses placeholders like
${OPENAI_API_KEY}in configuration examples.\n- Obfuscation (SAFE): No encoded content, multi-layered Base64, zero-width characters, or homoglyphs were identified in the text or code samples.\n- Unverifiable Dependencies & Remote Code Execution (SAFE): The skill references standard, well-known Spring AI dependencies (org.springframework.ai). There are no commands for downloading or executing remote scripts.\n- Indirect Prompt Injection (SAFE): Although the documentation demonstrates how to interpolate user inputs into prompts, the skill itself does not process runtime data or provide any exploitable surface to the agent environment.\n- NO_CODE (SAFE): The skill consists entirely of documentation and does not define any tools, functions, or executable code that would run in the agent's host environment.
Audit Metadata