golang-structs-interfaces
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to analyze and modify Go source code (
**/*.go). This creates an attack surface where malicious instructions could be embedded in the data the agent processes (e.g., within Go comments or string literals). - Ingestion points: Go source files are ingested into the agent's context through tools like
Read,Grep, andGlob. - Boundary markers: The skill does not specify explicit boundary markers or instructions to ignore embedded prompts within the files it processes.
- Capability inventory: The skill possesses significant capabilities, including the ability to modify the filesystem (
Write,Edit) and execute shell commands related to Go development (Bash(go:*),Bash(golangci-lint:*), andBash(git:*)). - Sanitization: There is no evidence of specific sanitization or validation of the ingested code content before it is processed by the agent.
Audit Metadata