golang-testing
Pass
Audited by Gen Agent Trust Hub on May 2, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill configuration includes the installation of
gotestsfrom the official repository of a well-known open-source tool (github.com/cweill/gotests/gotests). - [COMMAND_EXECUTION]: The skill utilizes restricted bash commands (
go,git,golangci-lint,gotests) and theAgenttool to perform its testing and review tasks, which is consistent with its stated purpose as a development utility. - [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface (Category 8) as it is designed to ingest and process user-provided source code files to generate or review tests. This is a low-severity risk inherent to the primary function of a code-analysis skill.
- Ingestion points: Files read via
Read,Glob, andGreptools (SKILL.md). - Boundary markers: Not explicitly defined in instructions.
- Capability inventory: Subprocess execution via restricted
Bashcommands, file modification viaWrite/Edit, and sub-agent spawning (SKILL.md). - Sanitization: Relies on the underlying LLM's instruction-following and platform-level command restrictions.
- [SAFE]: The skill recommends and provides examples for industry-standard testing libraries such as Uber's
goleak,testify, andclockwork.
Audit Metadata