go-testing

Pass

Audited by Gen Agent Trust Hub on Mar 29, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill's bench-compare.sh script references the installation of benchstat from the official Go project repository (golang.org/x/perf/cmd/benchstat). This is a well-known and trusted source for Go performance tooling.
  • [COMMAND_EXECUTION]: The skill utilizes standard Go toolchain commands, including go test, go tool cover, and go install. These operations are routine for Go development and are handled within the agent's execution environment.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes project source code to generate and run tests, creating a potential surface for indirect prompt injection via malicious code comments.
  • Ingestion points: Reads repository Go source files and CLAUDE.md to determine testing scope.
  • Boundary markers: Relies on standard Go syntax and structured table-driven test patterns.
  • Capability inventory: Bash for automation, Write and Edit for test file generation and updates.
  • Sanitization: Includes basic regex validation for function names in gen-table-test.sh to ensure they follow Go export conventions.
  • [DYNAMIC_EXECUTION]: The gen-table-test.sh script generates Go source code templates based on function names. While this involves generating executable content, it is a standard scaffolding workflow and does not execute untrusted external code.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 29, 2026, 01:30 PM