go-documentation

Pass

Audited by Gen Agent Trust Hub on Sep 15, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill recommends installing pkgsite from the official Go sub-repository golang.org/x/pkgsite. This is a well-known and trusted tool for previewing Go documentation.
  • [DYNAMIC_EXECUTION]: The execution script scripts/check-docs.sh automatically compiles the accompanying Go source file scripts/check-docs-ast.go using go build. The resulting binary is cached locally and used to perform AST-based analysis of Go source code to detect missing documentation comments.
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests and parses user-provided Go source files to identify documentation gaps.
  • Ingestion points: The check-docs-ast.go script reads Go files from the user's project directory (specified via SKILL.md and command arguments passed to scripts/check-docs.sh).
  • Boundary markers: The skill relies on the structured nature of Go source code and the standard Go parser package for delimitation.
  • Capability inventory: The skill uses bash to run its validation script and can execute go build to compile its local analyzer script.
  • Sanitization: The analysis tool performs read-only AST parsing and does not execute the code being analyzed, which restricts the potential impact of malicious code patterns in the analyzed files.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 15, 2026, 07:27 AM