bump-go-dependencies
Pass
Audited by Gen Agent Trust Hub on Sep 3, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- Command Execution: The skill performs several shell operations including
go list,go get,task lint, andtask test. These tools are standard for Go development and are used here to manage dependencies and execute the project's validation suite. - Git Integration: It automates the staging and committing of successful updates using
git addandgit commit, which helps maintain a clean version history. - Indirect Prompt Injection Consideration: The automation logic parses the output of
go listto determine which modules to update. Since this data comes from the project's environment, it is treated as an ingestion point for external data, which is a standard consideration for development-focused skills.
Audit Metadata