skills/gogf/skills/goframe-v2/Gen Agent Trust Hub

goframe-v2

Pass

Audited by Gen Agent Trust Hub on Mar 28, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill's examples include Makefiles and Dockerfiles that execute standard development commands.
  • The Makefiles include commands like go install github.com/gogf/gf/cmd/gf/v2@latest to install the framework's CLI tool.
  • The commands are used for code generation (gf gen dao, gf gen service) and deployment, which are standard for the intended primary purpose of the skill.
  • [EXTERNAL_DOWNLOADS]: The examples and documentation reference several external resources and dependencies.
  • Code examples fetch dependencies from the official GoFrame repository and other well-known services like Apollo, Consul, and Nacos.
  • These downloads are used for service discovery, configuration management, and framework functionality, and originate from established technology providers.
  • [CREDENTIALS_UNSAFE]: Multiple documentation files and code examples contain hardcoded credentials (e.g., "12345678", "password", "admin").
  • These are explicitly used as dummy placeholders for local development and documentation purposes.
  • One example demonstrates how to implement a custom database driver to handle encrypted passwords, using a hardcoded AES key for educational demonstration of the implementation logic.
  • [PROMPT_INJECTION]: The skill instructions in SKILL.md are purely technical and provide coding standards for the GoFrame framework.
  • There are no instructions that attempt to override agent behavior or bypass safety filters.
  • [DATA_EXFILTRATION]: No patterns associated with unauthorized data reading or sending sensitive files to external domains were found.
  • Network operations in the examples are limited to standard service mesh communication and API interactions required for framework functionality.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 28, 2026, 05:18 AM