golang-pro

SUSPICIOUS: the Go guidance itself is normal and proportionate, with no credential access or exfiltration behavior, but the install path is inconsistent with the stated author and uses transitive skill installation from another repository. This is a supply-chain trust issue rather than confirmed malware.