go-defensive-coding
Pass
Audited by Gen Agent Trust Hub on Aug 18, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [SAFE]: The skill instructions and reference materials contain legitimate technical guidance for the Go programming language, focusing on avoiding common pitfalls like typed-nil interfaces, slice aliasing, and numeric overflows.\n- [COMMAND_EXECUTION]: The skill utilizes standard Go development tools (go, gofmt, golangci-lint, gosec) for code verification. These tools are restricted by the skill's configuration to their intended use cases.\n- [INDIRECT_PROMPT_INJECTION]: The skill has the capability to read and process Go source code. While this provides a surface for indirect instructions in the analyzed code to influence the agent, the behavior is gated by the use of specific, reputable development tools and standard static analysis patterns.\n
- Ingestion points: Go source files accessed via the agent's file system tools.\n
- Boundary markers: Not explicitly defined within the instructional text.\n
- Capability inventory: Shell access for Go linting, testing, and formatting tools as defined in the frontmatter.\n
- Sanitization: Relies on the AI agent platform's secure tool invocation for command-line arguments.
Audit Metadata