backend-go-safety

Pass

Audited by Gen Agent Trust Hub on Apr 8, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: No malicious patterns or significant security risks were identified in the skill instructions or scripts.
  • [COMMAND_EXECUTION]: The skill uses restricted bash commands specifically for the Go toolchain and linter (go:*, golangci-lint:*), which is appropriate for its stated purpose of assisting with Go development.
  • [PROMPT_INJECTION]: The skill processes user-provided Go code for review and editing. This is its primary intended function. While it creates an indirect prompt injection surface, no specific exploitation patterns were found.
  • Ingestion points: User-provided Go source files via the agent.
  • Boundary markers: Not explicitly defined for user code comments.
  • Capability inventory: Edit, Write, and restricted Bash tools in SKILL.md.
  • Sanitization: None detected for processed code content.
  • [SAFE]: Cross-references to other skills (e.g., jimmy-skills@backend-go-concurrency) align with the author's own skill library and demonstrate standard functionality.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 8, 2026, 08:51 AM