go-code-review
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes a bash script to execute standard Go utilities like
gofmt,go vet, andgolangci-lintto automate mechanical code checks. These are routine development operations.- [INDIRECT_PROMPT_INJECTION]: As a code review tool, the skill processes external Go source files which act as untrusted input. - Ingestion points: Go source files and diffs provided for review (referenced in
SKILL.md). - Boundary markers: Instructions direct the agent to focus on specific code categories and use a structured template (
assets/review-template.md). - Capability inventory: The skill can execute local bash commands via the
allowed-toolsconfiguration to run analysis scripts. - Sanitization: No explicit sanitization of input code is performed, but the tool usage is limited to standard static analysis utilities.
Audit Metadata