gomtm-openapi-gen
Pass
Audited by Gen Agent Trust Hub on Jun 28, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses standard Go commands (
go test,go run) to execute local code and manage project artifacts. - [EXTERNAL_DOWNLOADS]: Fetches the
oapi-codegentool from its official GitHub repository via the Go toolchain, pinning it to a specific version (v2.5.0) for reproducibility. - [DYNAMIC_EXECUTION]: Generates a temporary Go test file (
pkg/openapi_skill_generate_test.go) at runtime to programmatically extract the OpenAPI specification from the application handler, which is then cleaned up using a shell trap. - [SAFE]: Implements strict validation checks, ensuring the script runs within the correct Git repository and refusing to operate if the Go cache (
GOCACHE) is configured to a path within the skill's own internal directory.
Audit Metadata