go-testing
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill includes a utility script
scripts/gen-table-test.shthat automates Go test generation and instructs the agent to rungo testcommands to verify generated code.\n- [INDIRECT_PROMPT_INJECTION]: The skill accepts user-provided function and package names to populate code templates, which is a potential surface for indirect injection.\n - Ingestion points: Input arguments to
scripts/gen-table-test.sh.\n - Boundary markers: None defined in the skill instructions.\n
- Capability inventory: The skill has the ability to write to files via the generator script and encourages the execution of the Go compiler/test runner.\n
- Sanitization: The generator script performs strict regex validation on inputs to ensure they match Go identifier rules and do not conflict with language keywords.
Audit Metadata