golang-lint
Pass
Audited by Gen Agent Trust Hub on May 2, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is focused on improving code quality and security through static analysis. It includes a recommended configuration file for
golangci-lintthat enables several security-oriented linters, such asgosec(for detecting SQL injection, hardcoded credentials, and weak crypto),bidichk(for detecting dangerous bidirectional Unicode sequences), andbodyclose/sqlclosecheck(for preventing resource leaks). - [SAFE]: The skill provides clear instructions for using
//nolintdirectives safely, mandating the inclusion of specific linter names and justification comments. This prevents blanket suppression of linting rules and ensures that security-related warnings are not inadvertently silenced. - [SAFE]: Tool access is appropriately scoped to development-related tasks (
go,golangci-lint,git) and standard file operations. No evidence of credential harvesting, unauthorized network communication, or persistence mechanisms was found. - [SAFE]: The skill uses the
Agenttool for parallelizing code cleanup tasks, which is a legitimate orchestration pattern within the agent's operating environment and does not introduce external risks.
Audit Metadata