dbos-golang

Pass

Audited by Gen Agent Trust Hub on Aug 9, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: No malicious patterns, obfuscation, or persistence mechanisms were detected in the skill instructions or reference files. The code examples represent standard practices for infrastructure and backend development.
  • [EXTERNAL_DOWNLOADS]: The skill recommends installing the dbos Go module from github.com/dbos-inc/dbos-transact-golang using the standard go get command.
  • [PROMPT_INJECTION]: The skill defines patterns for processing external events and messages (in references/comm-messages.md), which constitutes an attack surface for indirect prompt injection. The ingestion points include dbos.Recv and dbos.ReadStream, which process data that could potentially contain instructions. However, the skill provides infrastructure management guidance rather than LLM orchestration, and no malicious payloads were found.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 9, 2026, 04:04 PM
Security Audit — agent-trust-hub — dbos-golang