go-architecture

Pass

Audited by Gen Agent Trust Hub on Sep 29, 2026

Risk Level: SAFE
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill provides templates for REST APIs that ingest untrusted user input from HTTP requests.
  • Ingestion points: Request path parameters and JSON request bodies are processed in internal/httpapi/posts.go.
  • Boundary markers: The code uses strong typing (e.g., strconv.ParseInt) and schema validation via JSON decoding into Go structs, which effectively delimits untrusted data.
  • Capability inventory: Includes database persistence operations using pgxpool in internal/store/post_store.go.
  • Sanitization: Standard library parsing and structured data unmarshaling are employed to handle external content safely.
  • [EXTERNAL_DOWNLOADS]: The skill references industry-standard Go libraries and tools for service development.
  • Fetches the PostgreSQL driver pgx from its official repository at github.com/jackc/pgx/v5.
  • Recommends well-known dependency injection utilities from Google (google/wire) and Uber (uber-go/fx).
  • Mentions community-maintained Go skill resources from github.com/samber/cc-skills-golang.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 29, 2026, 06:13 AM