json-serialization
Pass
Audited by Gen Agent Trust Hub on Mar 12, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides a template for a Java
JsonUtilsutility class based on the industry-standard Jackson library. - [SAFE]: Deserialization methods
parseObjectandparseArraycorrectly use explicitClass<T>andTypeReference<T>parameters. This approach prevents Remote Code Execution (RCE) vulnerabilities associated with insecure polymorphic deserialization (e.g., Jackson'senableDefaultTyping). - [SAFE]: The configuration in
JacksonConfigfocuses on benign data transformations such as date formatting and numeric precision protection for large integers, which are standard developer practices. - [SAFE]: No network operations, credential hardcoding, or suspicious command executions were detected in the code snippets provided.
Audit Metadata