code-review-go
Pass
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is intended to process and analyze untrusted external input in the form of Go source code during security reviews.
- Ingestion points: Processes .go source files, PR diffs, and project configuration files (go.mod) within the agent's context.
- Boundary markers: No specific delimiters or instructions for the agent to ignore potentially malicious comments or strings embedded within the analyzed code are provided.
- Capability inventory: The skill utilizes security scanning and search tools including
gosec,semgrep,govulncheck, andripgrepto analyze the code. - Sanitization: There is no evidence of sanitization or escaping of the ingested source code content before it is processed by the agent.
Audit Metadata