golang-pro
Fail
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: CRITICALEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill includes a link to documentation hosted on the author's GitHub Pages site. Although automated scans flagged the URL, it originates from a well-known service and aligns with the author's verified infrastructure.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze external Go source code, creating a potential surface for indirect prompt injection attacks.
- Ingestion points: Processes user-provided architecture, interface designs, and code implementations as specified in the workflow in
SKILL.md. - Boundary markers: There are no explicit instructions or delimiters to distinguish analyzed code from agent instructions.
- Capability inventory: The skill workflow requires the execution of shell commands such as
go vet,golangci-lint,go test -race, anddocker buildacross multiple files includingSKILL.mdandreferences/project-structure.md. - Sanitization: No validation or sanitization mechanisms are defined for external content before it is processed by the agent.
- [COMMAND_EXECUTION]: The core workflow and project documentation direct the agent to utilize standard Go development tools, including
go vet,golangci-lint, andgo test, to maintain code quality and performance standards.
Recommendations
- CRITICAL: 1 file(s) identified as malware by FileRep - DO NOT USE
- Contains 2 malicious URL(s) - DO NOT USE
Audit Metadata