golang-gin-swagger

Pass

Audited by Gen Agent Trust Hub on Sep 16, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill instructs the user to install github.com/swaggo/swag, which is a widely recognized and trusted open-source tool for generating Swagger documentation in the Go ecosystem.
  • [REMOTE_CODE_EXECUTION]: Provides standard GitHub Actions workflow examples that automate documentation generation. These workflows use official actions (actions/checkout, actions/setup-go) and execute standard build commands (go install, swag init).
  • [PERSISTENCE]: Includes a reference for setting up a Git pre-commit hook (.git/hooks/pre-commit) to ensure documentation is updated before committing. This is a common and legitimate developer practice for maintaining project consistency.
  • [INDIRECT_PROMPT_INJECTION]: As a coding assistant skill, it processes Go source code to generate documentation. While it has a surface for indirect injection (via code comments), the skill's scope is restricted to documentation generation, and the instructions emphasize validation and 'quality mindset' checks, which serve as a natural defense against accidental execution of embedded instructions.
  • [COMMAND_EXECUTION]: Mentions the use of standard CLI tools such as swag, go, and npm (for swagger2openapi). All command examples are well-formed and follow legitimate project maintenance patterns.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 16, 2026, 09:52 AM