golang-documentation
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a guide for Go documentation best practices. It includes templates for project files such as README, CHANGELOG, CONTRIBUTING, and llms.txt, as well as references for documenting APIs, libraries, and CLI tools. All provided examples follow standard Go ecosystem conventions.\n- [INDIRECT_PROMPT_INJECTION]: The skill has a surface for indirect injection as it is designed to ingest local Go source code for documentation audits and reviews.\n
- Ingestion points: Files matching **/*.go as specified in SKILL.md.\n
- Boundary markers: No explicit boundary markers or "ignore embedded instructions" warnings are defined in the skill instructions to delimit untrusted code from instructions.\n
- Capability inventory: The skill has access to Read, Edit, Write, Glob, Grep, Bash(go:), Bash(golangci-lint:), Bash(git:*), Agent, and WebFetch tools.\n
- Sanitization: No specific sanitization, escaping, or filtering of external code content is described in the skill instructions.\n
- Despite this attack surface, the behavior is consistent with the skill's primary purpose, and no malicious patterns or dangerous command chains were identified.\n- [EXTERNAL_DOWNLOADS]: Documentation templates reference standard package managers and registries including pkg.go.dev, GitHub, and Docker Hub. These are informational references for users to include in their own project documentation and do not involve the automated execution of untrusted remote code by the agent.
Audit Metadata