Security audit

Go Middleware

Security checks for vulnerabilities and agentic risk

Overview

This is a documentation-only Go middleware skill with some security-sensitive examples users should adapt carefully, but it does not contain hidden execution, persistence, or deceptive behavior.

Safe to install as a Go middleware reference skill. Before copying the examples into production, review outbound request destinations, avoid forwarding request metadata to untrusted services, and sanitize logs so tokens, credentials, personal data, internal paths, and raw panic details are not broadly retained or exported.

A.I.G

Vulnerability Patterns

Insecure Skill Coding PracticesFinds exploitable flaws such as hardcoded secrets or command injection
Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally

Findings (3)

T09 · Insecure Skill Coding Practices

Error

Location: references/context-propagation.md:169
Finding: Unrestricted Downstream URL Enables Server-Side Request Forgery
Content: View full analysis
Remediation: View remediation

T09 · Insecure Skill Coding Practices

Warning

Location: references/error-handling-middleware.md:141
Finding: Full Internal Error Messages May Expose Sensitive Data Through Logs
Content: View full analysis
Remediation: View remediation

T09 · Insecure Skill Coding Practices

Warning

Location: references/error-handling-middleware.md:174
Finding: Panic Values and Stack Traces May Leak Sensitive Runtime Information
Content: View full analysis
Remediation: View remediation

SkillSpector

Vulnerability Patterns

Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (2)

Missing User Warnings

Low

Category: Not specified by scanner
Confidence: 78% confidence
Finding: This markdown skill describes logging middleware and records request path, status, duration, and request IDs, while earlier sections also discuss propagating authenticated users and tenant IDs in context. The document does not include a user warning or caution about avoiding sensitive data, which is relevant for markdown files that describe behaviors affecting privacy.
Content: No source excerpt is available for this finding.

Missing User Warnings

Low

Category: Not specified by scanner
Confidence: 82% confidence
Finding: This markdown file includes an example that forwards a request-derived identifier in an outbound HTTP header to downstream services. Under the markdown-file criteria for missing user warnings, behavior that affects privacy or data sharing should be disclosed, but this section presents the propagation as a best practice without any warning about exposing identifiers across service boundaries.
Content: No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.