golang-lint
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill automates the installation of the
golangci-linttool using the commandgo install github.com/golangci/golangci-lint/cmd/golangci-lint@latest. This dependency is fetched from the tool's official GitHub repository. - [INDIRECT_PROMPT_INJECTION]: The skill operates on Go source code (
**/*.go) and project configuration files (.golangci.yml), which are external inputs. This creates a standard surface for indirect prompt injection common to code analysis tools. - Ingestion points: Go source files and the linter configuration file specified in the
pathssection ofSKILL.md. - Boundary markers: The instructions do not define explicit delimiters to separate user-provided code from the agent's operational context.
- Capability inventory: The skill uses
Bash(go:*)andBash(golangci-lint:*)for command execution and hasWriteaccess to the filesystem. - Sanitization: No explicit sanitization or filtering of the code content is performed before processing.
Audit Metadata