golang-security
Pass
Audited by Gen Agent Trust Hub on Aug 31, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill is entirely defensive, providing extensive documentation and checklists for preventing common vulnerabilities in Go applications.
- [EXTERNAL_DOWNLOADS]: The skill utilizes official Go vulnerability and security tools. It fetches configuration and binaries from golang.org and established security repositories on GitHub.
- [REMOTE_CODE_EXECUTION]: The skill installs and executes standard Go security tools (govulncheck, gosec) from trusted and well-known sources to perform vulnerability scanning and static analysis.
- [COMMAND_EXECUTION]: Shell command execution is restricted to a set of trusted development and security tools (go, git, govulncheck, golangci-lint) via allow-listed command prefixes in the skill configuration.
- [INDIRECT_PROMPT_INJECTION]: The skill audits user-provided Go code files.
- Ingestion points: The agent reads local .go source files defined in the paths configuration.
- Boundary markers: The skill relies on standard agent file-reading mechanisms without specific delimiters for these files.
- Capability inventory: The skill utilizes file operations and specific shell tools to perform its auditing and remediation tasks.
- Sanitization: The skill implements defensive logic and security best practices to evaluate the integrity of the processed code.
Audit Metadata