jenkins-go-acrazie
Pass
Audited by Gen Agent Trust Hub on Oct 7, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill analyzes external, untrusted Go repository files, which can be manipulated to influence the agent's interpretation and downstream pipeline commands.
- Ingestion points: The skill reads and interprets files including
go.mod,go.sum,go.work,vendor/modules.txt, and.golangci.ymlfrom target repositories as described in SKILL.md. - Boundary markers: The instructions do not specify any boundary markers or delimiters to isolate content ingested from the repository from the agent's internal logic.
- Capability inventory: The skill extracts and recommends commands for
go build,go test, and various linting tools based on repository content for use by thejenkins-devops-acrazieagent. - Sanitization: The skill lacks explicit instructions for validating or sanitizing the content of the repository files before processing them.
Audit Metadata