golang-cli
Pass
Audited by Gen Agent Trust Hub on May 2, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides high-quality templates for building Go CLI tools using well-known and trusted libraries such as
github.com/spf13/cobraandgithub.com/spf13/viper. - [SAFE]: Security best practices are explicitly integrated into the instructions, including mandatory argument validation patterns in
assets/examples/args.goand the use of environment variable prefixes to prevent configuration collisions. - [SAFE]: Exit code handling and I/O stream separation (stdout for results, stderr for diagnostics) follow Unix standards, promoting predictable and secure behavior when tools are used in automated pipelines.
- [SAFE]: The skill uses standard Go
ldflagsfor version injection inassets/examples/version.go, which is a secure compile-time operation that avoids hardcoding secrets or metadata in source code. - [SAFE]: The provided evaluation framework (
evals/evals.json) tests for adherence to safety and robustness patterns, such as ensuringos.Exitis not called within command logic to allow for proper resource cleanup.
Audit Metadata