go-gen-jsonschema
Pass
Audited by Gen Agent Trust Hub on Aug 17, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [UNVERIFIABLE_DEPENDENCIES_AND_REMOTE_CODE_EXECUTION]: The skill provides instructions to download and install the gen-jsonschema tool from the author's GitHub repository and the lefthook maintenance tool from Evil Martians using the go get -tool command. These downloads originate from identifiable and well-known sources.
- [COMMAND_EXECUTION]: Instructions specify the use of go generate, go tool, and git commands to automate code generation and maintain schema synchronization within the project's version control system.
- [INDIRECT_PROMPT_INJECTION]: The tool ingests Go source code and doc comments to generate LLM-facing JSON Schema descriptions, creating a surface for embedded instructions to reach the model.
- Ingestion points: Go struct fields and doc comments in local source files as described in SKILL.md.
- Boundary markers: None; doc comments are copied verbatim into schema description fields without delimiters.
- Capability inventory: The skill generates Go code (jsonschema_gen.go) and JSON schema files using a CLI generator.
- Sanitization: None; doc comments are intended to serve as direct instructions for the LLM.
Audit Metadata