golang-concurrency
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes project source code and possesses capabilities that could be exploited if malicious instructions were embedded in the ingested data.\n
- Ingestion points: The skill reads all Go source files (
**/*.go) as defined in thepathsconfiguration inSKILL.md.\n - Boundary markers: Absent. No delimiters or instructions are provided to the agent to ignore natural language prompts found within comments or code strings.\n
- Capability inventory: The skill is granted
Write,Edit, andBashexecution permissions forgo,golangci-lint, andgittools inSKILL.md.\n - Sanitization: Absent. There are no defined processes for validating or filtering the content of ingested files.\n- [EXTERNAL_DOWNLOADS]: The documentation mentions several external Go packages and developer resources.\n
- Mentions
github.com/samber/roas a pipeline utility library.\n - Mentions
go.uber.org/goleakas a tool for concurrency testing.\n - References official Go blog and documentation at
go.dev.\n - These are recognized as well-known and reputable sources within the software development community.
Audit Metadata