go-testing
Pass
Audited by Gen Agent Trust Hub on Mar 29, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill's
bench-compare.shscript references the installation ofbenchstatfrom the official Go project repository (golang.org/x/perf/cmd/benchstat). This is a well-known and trusted source for Go performance tooling. - [COMMAND_EXECUTION]: The skill utilizes standard Go toolchain commands, including
go test,go tool cover, andgo install. These operations are routine for Go development and are handled within the agent's execution environment. - [INDIRECT_PROMPT_INJECTION]: The skill processes project source code to generate and run tests, creating a potential surface for indirect prompt injection via malicious code comments.
- Ingestion points: Reads repository Go source files and
CLAUDE.mdto determine testing scope. - Boundary markers: Relies on standard Go syntax and structured table-driven test patterns.
- Capability inventory:
Bashfor automation,WriteandEditfor test file generation and updates. - Sanitization: Includes basic regex validation for function names in
gen-table-test.shto ensure they follow Go export conventions. - [DYNAMIC_EXECUTION]: The
gen-table-test.shscript generates Go source code templates based on function names. While this involves generating executable content, it is a standard scaffolding workflow and does not execute untrusted external code.
Audit Metadata