golang-troubleshooting
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted Go source code and possesses capabilities like file modification, shell command execution, and network access.
- Ingestion points: The agent is instructed to read and troubleshoot any
.gofiles in the project directory. - Boundary markers: The skill lacks explicit instructions for the agent to separate user code from instructions using delimiters.
- Capability inventory: The agent has permissions to read/write files and execute powerful development tools via the
Bashtool. - Sanitization: No specific sanitization of the ingested code content is defined, which is typical for code analysis utilities.
- [EXTERNAL_DOWNLOADS]: The skill configuration and instructions facilitate the installation of standard Go development tools from public repositories.
- Details: The metadata section specifies the installation of the Delve debugger via
go install. - References: The documentation recommends the
errchecklinter andgoleaklibrary, which are well-known tools in the Go community. - [COMMAND_EXECUTION]: The skill requires and uses several command-line tools for its primary troubleshooting purpose.
- Toolset: The agent uses
go(build, test, vet),dlv(debug, attach),git(log, diff, bisect), andgolangci-lint. - Purpose: All command executions are strictly scoped to diagnostics and issue reproduction as part of the intended debugging workflow.
Audit Metadata