backend-go-safety
Pass
Audited by Gen Agent Trust Hub on Apr 8, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns or significant security risks were identified in the skill instructions or scripts.
- [COMMAND_EXECUTION]: The skill uses restricted bash commands specifically for the Go toolchain and linter (
go:*,golangci-lint:*), which is appropriate for its stated purpose of assisting with Go development. - [PROMPT_INJECTION]: The skill processes user-provided Go code for review and editing. This is its primary intended function. While it creates an indirect prompt injection surface, no specific exploitation patterns were found.
- Ingestion points: User-provided Go source files via the agent.
- Boundary markers: Not explicitly defined for user code comments.
- Capability inventory:
Edit,Write, and restrictedBashtools inSKILL.md. - Sanitization: None detected for processed code content.
- [SAFE]: Cross-references to other skills (e.g.,
jimmy-skills@backend-go-concurrency) align with the author's own skill library and demonstrate standard functionality.
Audit Metadata