go-patterns

Pass

Audited by Gen Agent Trust Hub on Sep 8, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The script scripts/sync-google-style-guide.py fetches documentation from Google's official style guide repository on GitHub. This is a well-known and trusted source used to maintain local reference material for the AI agent.
  • [COMMAND_EXECUTION]: The skill includes several scripts that execute standard Go development tools such as go test, go build, and make check. These operations are the primary purpose of the skill and are restricted to local project contexts.
  • [INDIRECT_PROMPT_INJECTION]: The skill analyzes local Go source files and tool outputs. While this represents a surface for indirect prompt injection, the skill mitigates risk by using deterministic parsing scripts and structured reporting formats rather than passing raw untrusted content directly into the agent context without boundaries.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 8, 2026, 08:59 AM