bump-go-dependencies

Pass

Audited by Gen Agent Trust Hub on Sep 3, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • Command Execution: The skill performs several shell operations including go list, go get, task lint, and task test. These tools are standard for Go development and are used here to manage dependencies and execute the project's validation suite.
  • Git Integration: It automates the staging and committing of successful updates using git add and git commit, which helps maintain a clean version history.
  • Indirect Prompt Injection Consideration: The automation logic parses the output of go list to determine which modules to update. Since this data comes from the project's environment, it is treated as an ingestion point for external data, which is a standard consideration for development-focused skills.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 3, 2026, 05:13 PM
Security Audit — agent-trust-hub — bump-go-dependencies