z-go-naming
Pass
Audited by Gen Agent Trust Hub on Oct 13, 2026
Risk Level: SAFE
Full Analysis
- [PROMPT_INJECTION]: No instructions were found that attempt to override agent safety guidelines, bypass constraints, or extract system prompts.
- [DATA_EXFILTRATION]: The skill does not contain hardcoded credentials, access sensitive file paths (like .ssh or .aws), or initiate network requests to external domains.
- [REMOTE_CODE_EXECUTION]: There are no patterns involving the download and execution of remote scripts (e.g., curl | bash) or the installation of unverified third-party packages.
- [COMMAND_EXECUTION]: The skill includes a reference to
golangci-lint, which is a well-known, legitimate development tool used for static analysis of Go code. This is a benign instructional example for developers. - [OBFUSCATION]: No base64 encoding, zero-width characters, homoglyphs, or other techniques to hide malicious intent were detected.
- [INDIRECT_PROMPT_INJECTION]: While the skill instructs the agent to process code identifiers (untrusted data), it does not define any dangerous capabilities—such as file modification or network exfiltration—that could be exploited via a naming-based injection.
- [DYNAMIC_CONTEXT_INJECTION]: The skill does not utilize any platform-specific dynamic execution markers like the exclamation-backtick syntax for load-time shell commands.
Audit Metadata