go-code-review
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: No malicious patterns were detected. The skill's operations are limited to reading and analyzing Go source files and project configuration to provide development feedback.
- [INDIRECT_PROMPT_INJECTION]: The skill analyzes external Go source code and project configuration files. While this is a potential ingestion surface for indirect prompt injection, it is essential for the skill's primary function as a code reviewer and is handled as a standard functional risk.
- Ingestion points: Go source files (.go) and go.mod files referenced in the workflow.
- Boundary markers: The skill does not define explicit delimiters for input code, relying on the agent's context management.
- Capability inventory: The skill utilizes file reading capabilities to process code units.
- Sanitization: Code is processed directly for review without specific pre-filtering instructions.
Audit Metadata