go-test
Pass
Audited by Gen Agent Trust Hub on Apr 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes tools such as
smart_buildandmutation_testto execute Go build processes and mutation testing suites. These are standard operations for a developer tool designed for testing and quality assurance. - [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface because it is designed to ingest and analyze untrusted project source code. 1. Ingestion points: The
smart_readtool and theall_codetable referenced inreferences/tq_schema.md. 2. Boundary markers: Not present in the provided documentation. 3. Capability inventory: Includes the ability to execute tests and mutation suites via subprocesses and run SQL queries. 4. Sanitization: No sanitization of ingested code content is specified. This is classified as a low-severity architectural surface common to code-analysis tools.
Audit Metadata