Third-party audit

Gen Agent Trust Hub

create-spring-boot-java-project · github/awesome-copilot

Passed
Provider summary

The skill automates the creation of a Spring Boot project by downloading a template from the official Spring Initializr service. It sets up a local development environment with Docker and databases using default credentials. A minor security risk exists because user-provided project names are used directly in shell commands without sanitization.

The provider classified the analyzed snapshot as NONE risk. This result applies to the content available at audit time.

Provider
Gen Agent Trust Hub
Normalized result
pass
Risk level
NONE
Audited
Apr 28, 2026
Interpretation

How to use this signal

01

Confirm the source

Compare the repository, publisher, and installation command before continuing.

02

Read the content

Review SKILL.md, scripts, and allowed tools. Artificial Atlas never executes them during indexing.

03

Limit permissions

Use the narrowest possible scope and avoid broad credentials for third-party skills.