go-test-engineering
Pass
Audited by Gen Agent Trust Hub on Sep 12, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill operates by ingesting and analyzing Go source code and test files from the local repository, which constitutes a surface for indirect instructions.
- Ingestion points: The skill reads repository files, including
*_test.goand associated application source code, as defined in the Audit Workflow. - Boundary markers: No specific delimiters or safety instructions are provided to help the agent distinguish between code logic and potential malicious instructions embedded in code comments or string literals.
- Capability inventory: The skill uses shell execution capabilities to run verification commands such as
go test,go vet, andmake check. - Sanitization: The instructions do not specify a requirement to sanitize or filter the content of the files before processing or executing tests.
Audit Metadata