golang-stretchr-testify

Pass

Audited by Gen Agent Trust Hub on Sep 14, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill configuration includes an installation step for the gotests tool using 'go install github.com/cweill/gotests/...@latest'. This is a well-known community utility for generating table-driven tests in Go.\n- [COMMAND_EXECUTION]: The skill is permitted to execute several Go-related development tools including go, gotests, golangci-lint, and gopls. These tools are used for testing, linting, and language server operations within the development environment.\n- [INDIRECT_PROMPT_INJECTION]: The skill operates on external Go source code which presents a potential attack surface for indirect prompt injection.\n
  • Ingestion points: The skill reads project source files identified by the '**/*.go' path pattern in SKILL.md.\n
  • Boundary markers: No explicit delimiters or instructions are provided to the agent to ignore potentially malicious content embedded in the processed source code.\n
  • Capability inventory: The skill has the ability to read, edit, and write files, as well as execute Go build and test commands via the Bash tool.\n
  • Sanitization: There are no specific sanitization or validation steps defined for the content of the Go files before they are processed by the agent.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 14, 2026, 05:09 AM
Security Audit — agent-trust-hub — golang-stretchr-testify