go-concurrency-patterns
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references the
golang.org/x/syncpackage for semaphore and errgroup patterns inreferences/details.md. This is an official Go sub-repository and a well-known service. - [INDIRECT_PROMPT_INJECTION]: The
fetchAllURLsandfetchWithLimitpatterns inreferences/details.mdimplement network fetching capabilities. While benign in the context of these templates, an agent implementing this logic could be susceptible to indirect prompt injection or SSRF if it processes untrusted URLs without sanitization. 1. Ingestion points:urlsparameter infetchAllURLsandfetchWithLimit(references/details.md). 2. Boundary markers: Absent. 3. Capability inventory:http.DefaultClient.Dofor network requests. 4. Sanitization: Absent.
Audit Metadata