go-openapi
Pass
Audited by Gen Agent Trust Hub on Aug 18, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill recommends fetching established development tools from their official GitHub repositories using the Go toolchain.- [REMOTE_CODE_EXECUTION]: The instructions involve installing and executing third-party binaries such as oapi-codegen and oasdiff to facilitate code generation and API contract validation.- [COMMAND_EXECUTION]: Utilizes the Go toolchain (go generate, go get) and other CLI utilities (vacuum, oasdiff) to automate development tasks and ensure code consistency.- [PROMPT_INJECTION]: The skill identifies a surface for indirect prompt injection through the ingestion of external OpenAPI specification files.
- Ingestion points: The agent is instructed to read api/openapi.yaml for generation and linting tasks in SKILL.md.
- Boundary markers: No explicit delimiters or instructions to ignore embedded content within the YAML files are provided.
- Capability inventory: The skill utilizes Bash(go:), Bash(oapi-codegen:), Bash(oasdiff:), and Bash(vacuum:) for file processing.
- Sanitization: The content is processed directly by the respective Go tools without an intermediate sanitization layer.
Audit Metadata