golang-refactoring
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes restricted shell commands to execute standard Golang development and analysis tools, including
go,gopls,benchstat, andgolangci-lint. It also employs version control and project management tools likegitand the GitHub CLI (gh). These operations are consistent with the skill's primary purpose of code refactoring and project management. - [EXTERNAL_DOWNLOADS]: The skill configuration and documentation reference several external resources for tool installation and guidance. This includes official Go tools from
golang.org(e.g.,gopls,benchstat) and reputable third-party open-source projects such asuber-go/gopatchanddave/dst. These downloads originate from well-known and trusted development services. - [INDIRECT_PROMPT_INJECTION]: As the skill processes and modifies Go source code, it possesses an inherent attack surface for indirect prompt injection via untrusted data. However, the skill implements robust mitigations, including a mandatory 'Plan' gate requiring human sign-off, a preference for mechanical tools over manual LLM edits, and a coverage-adaptive safety net that requires tests and verification (
go build,go vet,go test) before and after every change.
Audit Metadata