springboot-patterns
Pass
Audited by Gen Agent Trust Hub on Mar 13, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a reference for Spring Boot best practices, including REST API design, JPA integration, and global exception handling.
- [SAFE]: No remote code execution (RCE) or dangerous command execution patterns were found. The provided code snippets follow standard enterprise Java patterns.
- [SAFE]: Includes explicit security documentation regarding the risks of trusting the
X-Forwarded-Forheader. It correctly advises usingrequest.getRemoteAddr()in conjunction with a trusted proxy filter (ForwardedHeaderFilter) to prevent IP spoofing. - [SAFE]: The skill does not access sensitive files, hardcode credentials, or exhibit data exfiltration behavior.
- [SAFE]: No obfuscation, persistence mechanisms, or privilege escalation techniques were detected.
Audit Metadata