go-programming
Pass
Audited by Gen Agent Trust Hub on Aug 26, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: No malicious patterns or security risks were identified. The skill utilizes standard Go development tools such as
go test,go list, andrg(ripgrep) which are appropriate for its stated purpose of building and debugging Go systems. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to process Go source code and module configuration files, which represents an ingestion surface for untrusted data.
- Ingestion points: Reads Go source files (
.go), module files (go.mod,go.sum), and package layouts within the project directory (SKILL.md). - Boundary markers: The instructions do not explicitly define delimiters or boundary markers to separate ingested code content from agent instructions.
- Capability inventory: The skill performs subprocess calls using
go test,go list, andrgto build context and verify changes (SKILL.md). - Sanitization: No explicit sanitization or filtering of external code content is defined in the workflow.
Audit Metadata