golang-code-style
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to audit and write Go source code, creating a surface for indirect prompt injection where malicious instructions could be embedded in code comments or strings of the files being processed.
- Ingestion points: The skill targeting includes all Go source files (
**/*.go) as defined in thepathsfrontmatter. - Boundary markers: The instructions do not define specific delimiters or "ignore" directives to prevent the agent from accidentally following instructions contained within the code it analyzes.
- Capability inventory: The skill has access to powerful tools including file system modification (
Edit,Write) and shell command execution (Bashscoped togo,git, andgolangci-lint) through itsallowed-toolsconfiguration. - Sanitization: There is no mention of sanitizing, escaping, or validating the content of the Go files before the agent processes them.
Audit Metadata