goquery-parsing
Pass
Audited by Gen Agent Trust Hub on Aug 22, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [SAFE]: The skill provides standard documentation and best practices for Go development, focusing on robust data extraction and code maintainability.
- [COMMAND_EXECUTION]: The skill specifies the use of
Bash(go:*),Bash(gofmt:*), andBash(goimports:*)tools. These are standard development tools used for compiling, testing, and formatting Go code, and their use is consistent with the skill's primary purpose of Go code generation. - [EXTERNAL_DOWNLOADS]: The skill references and encourages the use of the
github.com/PuerkitoBio/goquerylibrary. This is a well-established, reputable, and widely-used open-source library for HTML parsing in the Go ecosystem. - [PROMPT_INJECTION]: The skill processes untrusted HTML snapshots to generate parsing logic. While this presents an ingestion point for indirect prompt injection, the skill's focus on structured data extraction into typed Go models serves as an inherent mitigation. Ingestion points: HTML snapshots in context (SKILL.md); Boundary markers: Not present; Capability inventory: Bash, Write, Edit; Sanitization: strings.TrimSpace is used for extracted field values.
Audit Metadata