go-test-gen
Pass
Audited by Gen Agent Trust Hub on Mar 13, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [SAFE]: The skill provides well-structured templates and best practices for Go unit testing, specifically targeting the service and repository layers. It promotes standard practices such as table-driven tests and explicit call counts for mocks.
- [EXTERNAL_DOWNLOADS]: The skill's templates reference established Go testing libraries including github.com/DATA-DOG/go-sqlmock and github.com/stretchr/testify. It also references an internal utility library github.com/tanookiai/go-core for error and database handling.
- [PROMPT_INJECTION]: The skill has an indirect prompt injection surface because it processes untrusted user-provided source code to generate unit tests. 1. Ingestion points: User-provided function code (Workflow Step 2). 2. Boundary markers: Absent; there are no specific delimiters to separate user code from generation instructions. 3. Capability inventory: No dangerous capabilities such as file system access, network operations, or subprocess execution are present in the skill files. 4. Sanitization: Absent; the skill does not perform validation or filtering of the input code. Given the lack of dangerous capabilities, this risk is limited to the integrity of the generated test code.
Audit Metadata