go-testing
Pass
Audited by Gen Agent Trust Hub on Nov 1, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads the official 'postgres:17.6-alpine' image from Docker Hub to provide a consistent and isolated environment for integration tests.
- [COMMAND_EXECUTION]: The skill automates the execution of 'go test' suites and manages Docker containers using the 'testcontainers-go' library to ensure tests run against a real database backend.
- [DYNAMIC_EXECUTION]: In 'assets/pgtest/pgtest.go', the skill assembles a shell script used as a container entrypoint. This script implements an idle watchdog that monitors Postgres client activity and automatically shuts down the container after 5 minutes of inactivity, serving as a resource management safeguard.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests local migration files to provision the test database schema. It mitigates potential injection risks in this process by using 'pgx.Identifier' to sanitize database names and identifiers before executing administrative SQL commands (e.g., CREATE DATABASE).
Audit Metadata