skills/adibfirman/dotfiles/golang-cli/Gen Agent Trust Hub

golang-cli

Pass

Audited by Gen Agent Trust Hub on May 2, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides high-quality templates for building Go CLI tools using well-known and trusted libraries such as github.com/spf13/cobra and github.com/spf13/viper.
  • [SAFE]: Security best practices are explicitly integrated into the instructions, including mandatory argument validation patterns in assets/examples/args.go and the use of environment variable prefixes to prevent configuration collisions.
  • [SAFE]: Exit code handling and I/O stream separation (stdout for results, stderr for diagnostics) follow Unix standards, promoting predictable and secure behavior when tools are used in automated pipelines.
  • [SAFE]: The skill uses standard Go ldflags for version injection in assets/examples/version.go, which is a secure compile-time operation that avoids hardcoding secrets or metadata in source code.
  • [SAFE]: The provided evaluation framework (evals/evals.json) tests for adherence to safety and robustness patterns, such as ensuring os.Exit is not called within command logic to allow for proper resource cleanup.
Audit Metadata
Risk Level
SAFE
Analyzed
May 2, 2026, 11:44 AM