golang-concurrency

Pass

Audited by Gen Agent Trust Hub on Sep 14, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill processes project source code and possesses capabilities that could be exploited if malicious instructions were embedded in the ingested data.\n
  • Ingestion points: The skill reads all Go source files (**/*.go) as defined in the paths configuration in SKILL.md.\n
  • Boundary markers: Absent. No delimiters or instructions are provided to the agent to ignore natural language prompts found within comments or code strings.\n
  • Capability inventory: The skill is granted Write, Edit, and Bash execution permissions for go, golangci-lint, and git tools in SKILL.md.\n
  • Sanitization: Absent. There are no defined processes for validating or filtering the content of ingested files.\n- [EXTERNAL_DOWNLOADS]: The documentation mentions several external Go packages and developer resources.\n
  • Mentions github.com/samber/ro as a pipeline utility library.\n
  • Mentions go.uber.org/goleak as a tool for concurrency testing.\n
  • References official Go blog and documentation at go.dev.\n
  • These are recognized as well-known and reputable sources within the software development community.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 14, 2026, 05:09 AM
Security Audit — agent-trust-hub — golang-concurrency