go-web-expert
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill enforces "Zero Global State" via constructor injection, which is a best practice for testability and avoiding race conditions in concurrent Go web servers.
- [SAFE]: The "Validation First" rule mandates that all incoming request data be validated at the system boundary using established libraries like
go-playground/validator, which is a critical security measure against malicious input and parameter tampering. - [SAFE]: The reference materials include security-positive recommendations, such as using
http.MaxBytesReaderto limit the size of request bodies, effectively mitigating potential Denial-of-Service (DoS) attacks. - [SAFE]: No patterns of prompt injection, obfuscation, data exfiltration, or unauthorized remote code execution were found in the instructions or the accompanying reference code examples.
Audit Metadata