go-runtime-updater
Pass
Audited by Gen Agent Trust Hub on Apr 8, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill directs the agent to use standard Go CLI tools, specifically
go mod editandgo work edit, to modify thegoandtoolchaindirectives ingo.modandgo.workfiles. - [EXTERNAL_DOWNLOADS]: The skill fetches Go version information from
pkg.go.dev/std, which is a well-known and official service for Go documentation and version tracking. - [PROMPT_INJECTION]: The skill has an indirect prompt injection surface due to the ingestion of external data. 1. Ingestion points:
pkg.go.dev/std(viaSKILL.md). 2. Boundary markers: Absent. 3. Capability inventory: Shell command execution viago mod editandgo work edit. 4. Sanitization: Instructions specify reading a specificVersion: goX.Y.Zline, which provides limited filtering of the ingested content.
Audit Metadata