golang-pro

Pass

Audited by Gen Agent Trust Hub on Aug 27, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [SAFE]: The skill provides high-quality Go 1.21+ development guidance. It promotes idiomatic patterns such as proper context propagation and error handling, and relies on established community tools like golangci-lint and the Go race detector.
  • [COMMAND_EXECUTION]: The skill utilizes standard Go development commands including go vet, golangci-lint, and go test to validate code quality. These are routine operations for a developer-oriented skill and do not involve suspicious execution of remote scripts or hidden binaries.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes external data in the form of Go source code and project documentation. This introduces a potential surface for indirect prompt injection, as the agent may execute commands based on the content of analyzed files.
  • Ingestion points: User-provided Go source files and architecture documentation are analyzed during the 'Analyze architecture' and 'Implement' steps in SKILL.md.
  • Boundary markers: None identified; there are no specific delimiters or instructions used to isolate user-provided code from the agent's internal logic.
  • Capability inventory: The skill includes instructions to execute go vet, golangci-lint, and go test on the codebase.
  • Sanitization: None identified; the skill assumes that analyzed code does not contain malicious instructions aimed at the agent.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 27, 2026, 11:50 AM
Security Audit — agent-trust-hub — golang-pro