golang-gopls
Pass
Audited by Gen Agent Trust Hub on Aug 20, 2026
Risk Level: SAFEREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: Fetches and installs the
goplsbinary from the officialgolang.orgrepository. This targets a well-known and trusted source within the Go ecosystem. - [COMMAND_EXECUTION]: The skill guides the agent to perform semantic analysis and code refactoring using the
goplsCLI and MCP tools. These operations are scoped to the development workspace and represent standard IDE-like functionality. - [INDIRECT_PROMPT_INJECTION]: The skill processes Go source code, creating an attack surface for indirect injections. Ingestion points: Go source files and package APIs read by
gopls. Boundary markers: None explicitly defined in the instructions. Capability inventory: Includes file read/write access and restricted bash execution (scoped togo,git,gopls). Sanitization: No specific content filtering is implemented. This is a standard risk for tools designed to analyze untrusted codebases.
Audit Metadata