z-go-codegen-patterns
Pass
Audited by Gen Agent Trust Hub on Oct 14, 2026
Risk Level: SAFE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes external data via YAML manifests and Go templates. It significantly reduces the attack surface by recommending structured AST manipulation and early schema validation.\n
- Ingestion points: Manifest schemas and Go templates (
*.go.tmpl) described inSKILL.md.\n - Boundary markers: Advocates for mandatory schema validation (
schema.Validate) before template execution to ensure input integrity.\n - Capability inventory: Utilizes standard Go file operations (
os.WriteFile,os.ReadFile) specifically for managing test data (golden files) as shown inSKILL.md.\n - Sanitization: Recommends using the Go AST parser and
astutilfor code modifications, which prevents injection vulnerabilities common in string-based code generation.\n- [EXTERNAL_DOWNLOADS]: The skill references well-known and trusted Go libraries, includinggolang.org/x/toolsandgithub.com/dave/dst. These are standard tools for Go developers performing AST analysis and modification.\n- [COMMAND_EXECUTION]: Illustrates standard developer workflows using thego testcommand for validating generated output and updating golden files.
Audit Metadata