skills/compozy/kb/golang-pro/Gen Agent Trust Hub

golang-pro

Pass

Audited by Gen Agent Trust Hub on Sep 21, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [SAFE]: The skill implements standard, idiomatic Go patterns and provides helpful reference material for developers. All code examples, such as worker pools, fan-in/fan-out patterns, and generic data structures, are aligned with Go community best practices.
  • [INDIRECT_PROMPT_INJECTION]: The skill identifies a standard attack surface for coding assistants by analysis and execution of tools on user-provided code.
  • Ingestion points: User-provided Go source code and project configurations mentioned in the Core Workflow (SKILL.md).
  • Boundary markers: None explicitly defined in the text; uses standard file boundaries.
  • Capability inventory: Execution of Go toolchain commands (go build, go test, go vet, go mod) and linting tools (golangci-lint) via shell as part of the implementation workflow (SKILL.md, references/project-structure.md).
  • Sanitization: Relies on standard Go compiler and linter behavior; no specific input sanitization is defined for the agent.
  • [COMMAND_EXECUTION]: The skill instructs the agent to run common Go development tools like go vet, go test -race, and golangci-lint. These are legitimate operations for the skill's primary purpose and do not represent a security risk in this context.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 21, 2026, 01:24 AM