golang-troubleshooting

Pass

Audited by Gen Agent Trust Hub on Sep 14, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted Go source code and possesses capabilities like file modification, shell command execution, and network access.
  • Ingestion points: The agent is instructed to read and troubleshoot any .go files in the project directory.
  • Boundary markers: The skill lacks explicit instructions for the agent to separate user code from instructions using delimiters.
  • Capability inventory: The agent has permissions to read/write files and execute powerful development tools via the Bash tool.
  • Sanitization: No specific sanitization of the ingested code content is defined, which is typical for code analysis utilities.
  • [EXTERNAL_DOWNLOADS]: The skill configuration and instructions facilitate the installation of standard Go development tools from public repositories.
  • Details: The metadata section specifies the installation of the Delve debugger via go install.
  • References: The documentation recommends the errcheck linter and goleak library, which are well-known tools in the Go community.
  • [COMMAND_EXECUTION]: The skill requires and uses several command-line tools for its primary troubleshooting purpose.
  • Toolset: The agent uses go (build, test, vet), dlv (debug, attach), git (log, diff, bisect), and golangci-lint.
  • Purpose: All command executions are strictly scoped to diagnostics and issue reproduction as part of the intended debugging workflow.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 14, 2026, 07:14 PM
Security Audit — agent-trust-hub — golang-troubleshooting