golang-gin-api
Pass
Audited by Gen Agent Trust Hub on Mar 19, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill establishes patterns for systems that ingest untrusted data via HTTP and WebSocket endpoints, creating an attack surface for indirect prompt injection if the ingested content is subsequently interpreted as instructions by the agent.
- Ingestion points: Handlers in
internal/handler/ingest data usingShouldBindJSON,ShouldBindQuery, andShouldBindURI. - Boundary markers: The skill recommends consistent JSON error formatting to isolate system-generated messages from user-supplied data.
- Capability inventory: The skill provides implementations for local file system access (
c.SaveUploadedFileinreferences/file-uploads-local.md), network operations (HTTP/WebSocket server), and background job management. - Sanitization: It explicitly includes sanitization patterns using
html.EscapeStringandfilepath.Baseto neutralize malicious payloads.
Audit Metadata