tools-go
Pass
Audited by Gen Agent Trust Hub on Aug 22, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the Go toolchain and related utilities (go list, go mod graph, goda, staticcheck, govulncheck, go-callvis) to perform structural and security analysis of Go modules.
- [EXTERNAL_DOWNLOADS]: The skill references the official staticcheck installation path (honnef.co/go/tools/cmd/staticcheck) to assist in setting up the analysis environment.
- [PROMPT_INJECTION]: The skill processes output from external analysis tools which could contain data from untrusted source code. * Ingestion points: Command output from Go analysis tools in SKILL.md. * Boundary markers: None identified; results are provided directly to the agent context. * Capability inventory: Execution of shell-based Go development tools. * Sanitization: No specific filtering or validation of tool output is implemented.
Audit Metadata