go-modernize
Pass
Audited by Gen Agent Trust Hub on Oct 16, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches the
modernizemigration tool from the official Go project repository (golang.org/x/tools) using the Go toolchain. - [COMMAND_EXECUTION]: Executes standard Go toolchain commands, including
go fix,go run, andgo build, to perform automated code migrations and verify project stability. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted Go source code files, creating a potential attack surface where instructions embedded in code comments or documentation could influence agent behavior.
- Ingestion points: Reads local Go source files using
Read,Glob, andGreptools. - Boundary markers: No explicit delimiters or warnings to ignore instructions embedded in source code are provided.
- Capability inventory: Possesses the ability to modify project files (
Edit,Write) and execute Go commands (Bash(go:*)). - Sanitization: Does not specify any sanitization or validation of the content within the Go files being processed.
Audit Metadata