golang-dependency-management
Pass
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONREMOTE_CODE_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions to download and install several Go utilities for dependency auditing, version tracking, and binary size analysis, such as
psampaz/go-mod-outdated,jondot/goweight, andZxilly/go-size-analyzer. - [COMMAND_EXECUTION]: Numerous standard Go toolchain commands (e.g.,
go get,go mod tidy,go mod verify) and execution patterns for installed CLI tools are documented throughout the skill and its references. - [REMOTE_CODE_EXECUTION]: The skill includes commands to install Go tools via
go install, which involves fetching source code from remote repositories and compiling it locally. - [SAFE]: The skill includes strong security guardrails, specifically directing the AI agent to ask for user confirmation before adding any new dependencies. It also emphasizes the importance of committing
go.sumfor integrity verification and runninggovulncheckto detect known vulnerabilities.
Audit Metadata