golang-refactoring

Pass

Audited by Gen Agent Trust Hub on Sep 14, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes restricted shell commands to execute standard Golang development and analysis tools, including go, gopls, benchstat, and golangci-lint. It also employs version control and project management tools like git and the GitHub CLI (gh). These operations are consistent with the skill's primary purpose of code refactoring and project management.
  • [EXTERNAL_DOWNLOADS]: The skill configuration and documentation reference several external resources for tool installation and guidance. This includes official Go tools from golang.org (e.g., gopls, benchstat) and reputable third-party open-source projects such as uber-go/gopatch and dave/dst. These downloads originate from well-known and trusted development services.
  • [INDIRECT_PROMPT_INJECTION]: As the skill processes and modifies Go source code, it possesses an inherent attack surface for indirect prompt injection via untrusted data. However, the skill implements robust mitigations, including a mandatory 'Plan' gate requiring human sign-off, a preference for mechanical tools over manual LLM edits, and a coverage-adaptive safety net that requires tests and verification (go build, go vet, go test) before and after every change.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 14, 2026, 05:09 AM
Security Audit — agent-trust-hub — golang-refactoring