go-enum
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to run local shell commands using the
misetask runner (e.g.,mise run generate:enumsandmise run generate). These commands are intended to execute project-specific code generation tasks. - [INDIRECT_PROMPT_INJECTION]: The skill describes a workflow that involves reading and processing Go source code files to parse specific comments (
// ENUM(...)). This creates a surface where the contents of source files influence the agent's behavior and the generated code output. - Ingestion points: Go source files containing
// ENUM(...)comments. - Boundary markers: The skill relies on specific comment patterns but does not define explicit delimiters to isolate the parsed data from the agent's instructional context.
- Capability inventory: The skill triggers shell commands via
miseto run code generators. - Sanitization: No explicit sanitization or validation of the comment content is mentioned prior to processing by the generator.
Audit Metadata