hierarchical-errors
Pass
Audited by Gen Agent Trust Hub on Jul 23, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill defines a legitimate development workflow for Go code modernization. It correctly identifies Go semantics for errors.AsType and errors.Is and includes a 'Verification status' section that warns the user that the binary and specific analyzers mentioned are not publicly verified.
- [PROMPT_INJECTION]: The skill instructions create a surface area for indirect prompt injection (Category 8) because they direct the agent to execute tools on untrusted codebase files. However, this is inherent to its primary purpose and the risk is mitigated by the technical context provided.
- Ingestion points: Repository source code is read and processed by 'hierarchical-errors' and 'go' commands in SKILL.md.
- Boundary markers: None present for the untrusted code being analyzed.
- Capability inventory: Subprocess execution via 'bash', 'go' build/test toolchain, and 'edit' tool for source modification in SKILL.md.
- Sanitization: No sanitization of codebase content is performed before analysis.
Audit Metadata