golang-dependency-injection
Pass
Audited by Gen Agent Trust Hub on Apr 7, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill provides a potential surface for indirect prompt injection attacks because it processes untrusted data from multiple sources while maintaining significant operational capabilities.
- Ingestion points: The skill ingests untrusted data from the local file system using
Read,Glob, andGreptools, and from remote documentation viaWebFetchandmcp__context7__query-docs. - Boundary markers: There are no explicit instructions or delimiters defined to prevent the agent from obeying instructions embedded within the user code or remote documentation it processes.
- Capability inventory: The agent has the ability to modify the file system using
WriteandEdit, and to execute shell commands usingBash(go:*)andBash(golangci-lint:*). - Sanitization: No content sanitization or validation of external data is specified before it is incorporated into the agent's context.
Audit Metadata