goframe-v2
Pass
Audited by Gen Agent Trust Hub on Mar 28, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill's examples include Makefiles and Dockerfiles that execute standard development commands.
- The Makefiles include commands like
go install github.com/gogf/gf/cmd/gf/v2@latestto install the framework's CLI tool. - The commands are used for code generation (
gf gen dao,gf gen service) and deployment, which are standard for the intended primary purpose of the skill. - [EXTERNAL_DOWNLOADS]: The examples and documentation reference several external resources and dependencies.
- Code examples fetch dependencies from the official GoFrame repository and other well-known services like Apollo, Consul, and Nacos.
- These downloads are used for service discovery, configuration management, and framework functionality, and originate from established technology providers.
- [CREDENTIALS_UNSAFE]: Multiple documentation files and code examples contain hardcoded credentials (e.g., "12345678", "password", "admin").
- These are explicitly used as dummy placeholders for local development and documentation purposes.
- One example demonstrates how to implement a custom database driver to handle encrypted passwords, using a hardcoded AES key for educational demonstration of the implementation logic.
- [PROMPT_INJECTION]: The skill instructions in
SKILL.mdare purely technical and provide coding standards for the GoFrame framework. - There are no instructions that attempt to override agent behavior or bypass safety filters.
- [DATA_EXFILTRATION]: No patterns associated with unauthorized data reading or sending sensitive files to external domains were found.
- Network operations in the examples are limited to standard service mesh communication and API interactions required for framework functionality.
Audit Metadata