higress-wasm-go-plugin
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches Go dependencies from the higress-group organization's repositories on GitHub. These dependencies, including proxy-wasm-go-sdk and wasm-go, are official tools required for Higress plugin development.\n- [INDIRECT_PROMPT_INJECTION]: The skill defines patterns for processing untrusted HTTP traffic, which is the core function of gateway plugins.\n
- Ingestion points: Handlers for request/response headers and bodies defined in SKILL.md (e.g., onHttpRequestHeaders) and references/advanced-patterns.md (e.g., onStreamingRequestBody, onRequestBody).\n
- Boundary markers: Absent in the generic boilerplate code provided in the templates.\n
- Capability inventory: The skill utilizes network communication tools via HTTP (references/http-client.md) and Redis (references/redis-client.md) clients, and performs gateway traffic modification (proxywasm.AddHttpRequestHeader, proxywasm.SendHttpResponse) across all scripts.\n
- Sanitization: Absent; the provided code templates do not include specific input validation or sanitization, as this is left to the developer.
Audit Metadata