hns-moaiadk-best-practices

Pass

Audited by Gen Agent Trust Hub on Jul 30, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides documentation on Go development best practices, including testing strategies and configuration management, which are standard for maintaining code health.- [SAFE]: Explicit instructions are provided to avoid hardcoding sensitive information like API headers and credentials, directing them to dedicated configuration files (envkeys.go, defaults.go) as a security best practice.- [SAFE]: The skill implements quality gates including OWASP-aligned security reviews and automated linting, which actively improves the security posture of the developed code.- [PROMPT_INJECTION]: The skill processes external Go source files which constitutes an indirect prompt injection surface. This is a functional requirement for the skill's purpose as a development aid.
  • Ingestion points: The agent reads files matching internal/**/*.go and **/*_test.go.
  • Boundary markers: Not specified; the skill does not define specific delimiters to separate untrusted code from instructions.
  • Capability inventory: The skill allows the use of Bash, Read, Grep, and Glob which can be used to execute tests and linting tools.
  • Sanitization: No explicit sanitization of the code being analyzed is mentioned in the best practices.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 30, 2026, 08:29 PM
Security Audit — agent-trust-hub — hns-moaiadk-best-practices