golang-project-layout
Pass
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: SAFE
Full Analysis
- [PROMPT_INJECTION]: No attempts to override agent behavior or bypass safety guidelines were detected. The instructional language is standard and focused on architectural guidance.
- [DATA_EXPOSURE]: No hardcoded credentials or unsafe data handling patterns were found. The skill explicitly warns that sensitive values must come from environment variables or secret managers and never from configuration files. It also recommends including local secrets in
.gitignore. - [OBFUSCATION]: No obfuscated content, Base64-encoded commands, or hidden characters were detected in the instructions or reference files.
- [REMOTE_CODE_EXECUTION]: The skill does not contain any patterns for downloading and executing remote scripts. It lists standard tools like
go,git, andgolangci-lintas requirements, which is appropriate for a Go development skill. - [PRIVILEGE_ESCALATION]: No commands for acquiring elevated permissions or modifying sensitive system files were found.
- [PERSISTENCE]: No attempts to establish persistence on the host system were detected.
- [INDIRECT_PROMPT_INJECTION]: The skill is primarily instructional and does not demonstrate surfaces for ingesting untrusted data that would lead to indirect injection.
- [DYNAMIC_CONTEXT_INJECTION]: The skill does not use any dynamic shell execution syntax (like backticks with exclamation marks) in the SKILL.md file.
Audit Metadata