golang-architect
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references official documentation and provides instructions for installing well-known development tools like sqlc from their official GitHub repositories.
- [COMMAND_EXECUTION]: The skill includes a local shell script (sqlc-init.sh) used to automate the creation of project directory structures and configuration files. This script is intended to be executed in the user's local development environment to facilitate project setup.
- [INDIRECT_PROMPT_INJECTION]: The skill possesses a surface for indirect prompt injection as it ingests user-provided project requirements and directory paths to generate specific architectural recommendations and project scaffolding. 1. Ingestion points: User project descriptions and file system paths provided during consultation or tool initialization. 2. Boundary markers: None identified to separate user-provided data from the skill's internal logic. 3. Capability inventory: The skill can execute a bundled shell script that performs directory creation, file writing, and local command execution. 4. Sanitization: The initialization script validates the database engine argument against an allowlist (postgresql, mysql, sqlite3).
Audit Metadata