go-echo
Pass
Audited by Gen Agent Trust Hub on Aug 19, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [SAFE]: The skill provides security-conscious implementation examples for handling untrusted data. For instance,
samples/file-upload.mdcorrectly demonstrates the use offilepath.Baseto sanitize client-supplied filenames, preventing path traversal attacks. Similarly,references/getting-started/ip-address.mddetails secure client IP resolution usingIPExtractorand warns against the risks of trusting client-controllable headers without proper proxy configuration. - [SAFE]: The skill includes comprehensive documentation for security-enhancing middleware such as CSRF protection, Secure headers (covering XSS protection, CSP, and HSTS), and CORS, enabling developers to build secure-by-default applications.
- [EXTERNAL_DOWNLOADS]: The skill references the installation of standard and well-known Go packages and development tools, including the Echo framework (
github.com/labstack/echo/v5) and theairhot-reload utility (github.com/air-verse/air). - [COMMAND_EXECUTION]: The skill documents the use of standard Go toolchain commands (
go build,go run,go test) for application development, building, and testing.
Audit Metadata