go-cli-tui

Pass

Audited by Gen Agent Trust Hub on Sep 24, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPERSISTENCE
Full Analysis
  • [COMMAND_EXECUTION]: The skill provides instructions for building applications that execute subprocesses, including go install for distribution, ssh for tunneling and authentication handoffs, and package managers like brew for updates. The guidance emphasizes using structured argument calls over shell concatenation to prevent injection.
  • [EXTERNAL_DOWNLOADS]: Detailed guidance in self-update.md describes how to implement self-update mechanisms that download binaries or source code. The instructions explicitly mandate security controls such as checksum verification, executable identity validation, and atomic replacement to mitigate risks.
  • [PERSISTENCE]: The documentation for shell completions (shell-completion.md) discusses writing to user configuration directories like ~/.zfunc and updating fpath. It specifically cautions against silently editing shell profile files like .bashrc or .zshrc, advocating for atomic replacement and user-controlled setup.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 24, 2026, 10:01 AM