backend-go-documentation
Pass
Audited by Gen Agent Trust Hub on Nov 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and review project-specific content including Go source code, markdown documentation, and configuration files, creating an ingestion surface for potential indirect prompt injection. 1. Ingestion points: Reads project files using the Read, Glob, and Grep tools. 2. Boundary markers: The instructions do not define delimiters or specific warnings to ignore instructions within the analyzed files. 3. Capability inventory: The skill has access to file modification tools (Edit, Write) and shell command execution (Bash). 4. Sanitization: No explicit filtering or sanitization logic is provided for external content processing.
- [EXTERNAL_DOWNLOADS]: The documentation templates and instructions recommend downloading industry-standard tools like swaggo/swag and buf from their respective GitHub repositories. It also suggests registering projects on external discoverability platforms such as Context7 and DeepWiki.
Audit Metadata