golang-review
Pass
Audited by Gen Agent Trust Hub on Sep 11, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill provides a structured set of guidelines for reviewing Go codebases without performing any automated actions, network requests, or filesystem modifications.
- [INDIRECT_PROMPT_INJECTION]: The skill identifies a potential surface for indirect prompt injection as it ingests untrusted code diffs and configuration files (SKILL.md), but it lacks dangerous capabilities for exploitation.
- Ingestion points: Go source code, PR diffs,
go.mod, and.golangci.yml(SKILL.md). - Boundary markers: Analysis is scoped to specific diff ranges (SKILL.md).
- Capability inventory: The agent has no listed tool permissions for file writing or network access.
- Sanitization: None identified for processed code.
Audit Metadata