go-documentation
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill recommends installing
pkgsitefrom the official Go sub-repositorygolang.org/x/pkgsite. This is a well-known and trusted tool for previewing Go documentation. - [DYNAMIC_EXECUTION]: The execution script
scripts/check-docs.shautomatically compiles the accompanying Go source filescripts/check-docs-ast.gousinggo build. The resulting binary is cached locally and used to perform AST-based analysis of Go source code to detect missing documentation comments. - [INDIRECT_PROMPT_INJECTION]: The skill ingests and parses user-provided Go source files to identify documentation gaps.
- Ingestion points: The
check-docs-ast.goscript reads Go files from the user's project directory (specified viaSKILL.mdand command arguments passed toscripts/check-docs.sh). - Boundary markers: The skill relies on the structured nature of Go source code and the standard Go
parserpackage for delimitation. - Capability inventory: The skill uses
bashto run its validation script and can executego buildto compile its local analyzer script. - Sanitization: The analysis tool performs read-only AST parsing and does not execute the code being analyzed, which restricts the potential impact of malicious code patterns in the analyzed files.
Audit Metadata