golang-pro
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill operates on a vulnerability surface where indirect prompt injection could occur through the ingestion of untrusted user-provided code and project specifications.
- Ingestion points: The agent ingests Go source code, module configurations (go.mod), and architectural requirements provided by the user to perform analysis and development tasks (SKILL.md).
- Boundary markers: The instructions do not define specific delimiters or "ignore instructions" markers when processing code snippets or external documentation.
- Capability inventory: The skill workflow includes the execution of subprocesses such as
go vet,golangci-lint,go test, andgo build, which involve parsing and potentially executing code (SKILL.md, references/project-structure.md, references/testing.md). - Sanitization: There is no defined logic for sanitizing or escaping user-provided code before it is passed to linting or testing tools.
Audit Metadata