golang-pro
Pass
Audited by Gen Agent Trust Hub on Sep 8, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is configured to ingest external data from Go library documentation and local source files, which creates a potential vector for malicious instructions to influence the agent.
- Ingestion points: The skill uses
Read,Glob, andGreptools to ingest local file content and theContext7 MCPtools to fetch external documentation and examples. - Boundary markers: There are no explicit delimiters or safety instructions provided to help the agent distinguish between data content and its own system instructions.
- Capability inventory: The environment allows the use of the
Bashtool for shell command execution, as well as file modification tools likeWriteandEdit. - Sanitization: The instructions do not define any validation or sanitization steps for the data fetched from documentation IDs or local source code.
Audit Metadata