go-semantic-tools
Pass
Audited by Gen Agent Trust Hub on Aug 18, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill provides instructions for executing standard Go toolchain commands (go build, go doc, go list, go vet) and the Go language server (gopls). These are standard utilities for Go development and are used within their intended scope for semantic code analysis and navigation.- [INDIRECT_PROMPT_INJECTION]: The skill involves processing Go source code, which constitutes untrusted external data. While the skill lacks explicit boundary markers or sanitization steps for this data, it utilizes semantic analysis tools (gopls) rather than direct prompt interpolation, significantly reducing the surface for injection attacks. The risk is consistent with standard development tool usage.
Audit Metadata