golang
Pass
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill content is educational and promotes safe, idiomatic Go programming practices, such as rigorous error handling and the use of the race detector.
- [EXTERNAL_DOWNLOADS]: The instructions reference standard Go development tools and well-known, reputable libraries (e.g., chi, testify, gorilla/mux). These references target official domains and well-known community repositories.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process user-supplied Go code and project files, which is an inherent attack surface for coding assistants. 1. Ingestion points: User-provided Go source code and snippets analyzed by the agent. 2. Boundary markers: None explicitly defined for untrusted code in the instructions. 3. Capability inventory: Local execution of the Go toolchain (go test, go build) and static analysis tools (staticcheck). 4. Sanitization: The skill promotes defensive coding best practices that improve overall code safety but does not implement specific input sanitization for prompts.
Audit Metadata