dbos-golang
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs users to install the DBOS SDK via
go get github.com/dbos-inc/dbos-transact-golang/dbos@latest. This is a vendor-owned resource hosted on GitHub and aligns with the skill's primary purpose. - [INDIRECT_PROMPT_INJECTION]: The skill demonstrates patterns for ingesting untrusted data from external sources and processing it within agent-controlled workflows.
- Ingestion points: Code examples in
SKILL.mdandreferences/step-basics.mdshow the use ofhttp.Getto fetch data from external APIs likeapi.example.com. - Boundary markers: The provided examples do not demonstrate the use of boundary markers or instructions to ignore embedded commands within the fetched data.
- Capability inventory: The skill framework supports network operations, database persistence, and interaction with system-level CLI tools like
dbos. - Sanitization: The documentation does not explicitly show sanitization or validation of external content before it is processed by the workflow logic.
Audit Metadata