golang-gin-testing
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONCREDENTIALS_UNSAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references and provides instructions for using well-known testing tools and libraries, such as
testcontainers-go,vegeta,k6, andtestify. These are standard industry resources. - [INDIRECT_PROMPT_INJECTION]: The skill defines patterns for ingesting data through SQL fixtures and HTTP request bodies. It appropriately addresses potential risks by instructing developers to use compile-time constants for table names in database helpers to prevent injection.
- [COMMAND_EXECUTION]: Provides utility functions for database lifecycle management (
TRUNCATE,AutoMigrate) and instructions for running the Go test runner. These operations are limited to the development and testing environments. - [CREDENTIALS_UNSAFE]: Uses hardcoded dummy credentials and secrets (e.g.,
testpass,e2e-test-access-secret-32-bytes!!) strictly within the context of local end-to-end and integration tests. The skill also demonstrates proper secret management by reading from environment variables for CI/CD environments.
Audit Metadata