golang-database
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references several official GitHub repositories for established Go libraries, including sqlx (github.com/jmoiron/sqlx), pgx (github.com/jackc/pgx), and golang-migrate (github.com/golang-migrate/migrate). These are well-known services and trusted community resources documented neutrally as intended dependencies for Go database development.
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to ingest and analyze external data, creating a potential attack surface for indirect instructions.
- Ingestion points: The agent is directed to read and audit Go source code files (
**/*.go) and query database metadata (such as index definitions) using SQL MCP tools. - Boundary markers: The instructions do not define specific delimiters or "ignore embedded instructions" warnings for the code or database metadata being processed.
- Capability inventory: The skill has access to file system operations (Read, Edit, Write, Glob, Grep) and shell execution (Bash) for Go tools, linting, and git operations.
- Sanitization: There are no explicit validation or sanitization steps defined for the content retrieved from the codebase or database schema queries.
Audit Metadata