golang
Pass
Audited by Gen Agent Trust Hub on Oct 26, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes external Go source code and project metadata which serve as ingestion points for untrusted data.
- Ingestion points: Go source files (.go), module definitions (go.mod), and project directories.
- Boundary markers: The instructions lack explicit boundary markers or warnings to disregard instructions embedded in code comments.
- Capability inventory: The skill leverages powerful tools such as gopls, golangci-lint, go test, and go tool for code analysis and modification.
- Sanitization: There is no mention of sanitizing or escaping ingested code content before it is processed by the agent or its tools.
Audit Metadata