The Agent Skills Directory

[PROMPT_INJECTION]: No attempts to override agent behavior, bypass safety filters, or extract system instructions were found. The language is purely instructional.
[DATA_EXFILTRATION]: No sensitive file access (e.g., SSH keys, credentials) or unauthorized network transmissions were detected. Use of httptest and in-memory SQLite databases for testing is a standard and safe practice.
[REMOTE_CODE_EXECUTION]: No remote script downloads or execution patterns were identified. The GitHub Actions example uses official and trusted actions (actions/checkout, actions/setup-go).
[COMMAND_EXECUTION]: Shell commands are restricted to standard Go toolchain operations (go test, go tool cover) for local development and CI/CD environments.
[OBFUSCATION]: No obfuscated strings, zero-width characters, or homoglyph-based attacks were found in the instructions or code samples.
[PRIVILEGE_ESCALATION]: The skill does not use administrative commands like sudo or modify system-level permissions.
[INDIRECT_PROMPT_INJECTION]: While the skill demonstrates processing JSON and configuration data, the provided patterns follow best practices for testing and do not create an exploitable attack surface for prompt injection within the agent's context.
[DYNAMIC_EXECUTION]: The use of go:generate is a standard Go development pattern for code generation and does not involve executing untrusted code at runtime.
[DYNAMIC_CONTEXT_INJECTION]: No use of the dynamic execution syntax (!command) was detected in the skill documentation.

golang-testing