golang-observability
Pass
Audited by Gen Agent Trust Hub on Aug 31, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references several standard open-source Go libraries and observability tools, including OpenTelemetry SDK (
go.opentelemetry.io), Prometheus client (github.com/prometheus/client_golang), and the author's ecosystem ofsloghandlers andoopserror library. These are well-established resources in the Go development community. - [INDIRECT_PROMPT_INJECTION]: The skill operates by ingesting and analyzing Go source code, metrics configurations, and observability dashboards. This ingestion surface is a necessary part of the skill's function for auditing and instrumentation.
- Ingestion points: Analyzes
**/*.gofiles and observability configuration files (e.g., Prometheus rules, Grafana JSON). - Boundary markers: None explicitly defined for untrusted code segments.
- Capability inventory: Uses
Bash,Agent, andWebFetchtools to execute Go commands, linting, and fetch documentation or external configurations. - Sanitization: Relies on the underlying agent's core safety guardrails when processing file content.
Audit Metadata