golang-google-wire
Pass
Audited by Gen Agent Trust Hub on May 20, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches the google/wire package and CLI tool from the official GitHub repository, which is a trusted organization. This is the primary dependency for the skill's functionality.
- [COMMAND_EXECUTION]: Executes go get and wire ./... commands to manage dependencies and trigger the code generation process. These commands are necessary for the intended purpose of the skill.
- [PROMPT_INJECTION]: The skill ingests user-provided Go source files and injector stubs to generate code, which constitutes an indirect prompt injection surface.
- Ingestion points: Reads local Go source files and wire.go injector stubs (SKILL.md).
- Boundary markers: No explicit instructions are provided to the agent to ignore or delimit instructions found within user code.
- Capability inventory: The skill uses Write, Edit, and Bash(wire:*) tools to modify the codebase based on ingested data.
- Sanitization: The skill relies on the wire CLI tool's internal parsing logic; no additional sanitization of user-provided content is performed by the agent.
Audit Metadata