golang-gin-swagger
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the user to install
github.com/swaggo/swag, which is a widely recognized and trusted open-source tool for generating Swagger documentation in the Go ecosystem. - [REMOTE_CODE_EXECUTION]: Provides standard GitHub Actions workflow examples that automate documentation generation. These workflows use official actions (
actions/checkout,actions/setup-go) and execute standard build commands (go install,swag init). - [PERSISTENCE]: Includes a reference for setting up a Git pre-commit hook (
.git/hooks/pre-commit) to ensure documentation is updated before committing. This is a common and legitimate developer practice for maintaining project consistency. - [INDIRECT_PROMPT_INJECTION]: As a coding assistant skill, it processes Go source code to generate documentation. While it has a surface for indirect injection (via code comments), the skill's scope is restricted to documentation generation, and the instructions emphasize validation and 'quality mindset' checks, which serve as a natural defense against accidental execution of embedded instructions.
- [COMMAND_EXECUTION]: Mentions the use of standard CLI tools such as
swag,go, andnpm(forswagger2openapi). All command examples are well-formed and follow legitimate project maintenance patterns.
Audit Metadata