go-architecture
Pass
Audited by Gen Agent Trust Hub on Sep 29, 2026
Risk Level: SAFE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill provides templates for REST APIs that ingest untrusted user input from HTTP requests.
- Ingestion points: Request path parameters and JSON request bodies are processed in
internal/httpapi/posts.go. - Boundary markers: The code uses strong typing (e.g.,
strconv.ParseInt) and schema validation via JSON decoding into Go structs, which effectively delimits untrusted data. - Capability inventory: Includes database persistence operations using
pgxpoolininternal/store/post_store.go. - Sanitization: Standard library parsing and structured data unmarshaling are employed to handle external content safely.
- [EXTERNAL_DOWNLOADS]: The skill references industry-standard Go libraries and tools for service development.
- Fetches the PostgreSQL driver
pgxfrom its official repository atgithub.com/jackc/pgx/v5. - Recommends well-known dependency injection utilities from Google (
google/wire) and Uber (uber-go/fx). - Mentions community-maintained Go skill resources from
github.com/samber/cc-skills-golang.
Audit Metadata