go-binary-size

Pass

Audited by Gen Agent Trust Hub on Aug 18, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill provides instructions for the agent to execute standard development commands including go build, go tool nm, go version, ls, and grep to analyze and optimize project binaries.
  • [EXTERNAL_DOWNLOADS]: Recommends installing the go-size-analyzer tool via go install github.com/Zxilly/go-size-analyzer/cmd/gsa@latest. This is a standard practice for binary analysis in the Go ecosystem and is relevant to the skill's primary purpose.
  • [INDIRECT_PROMPT_INJECTION]: The skill instructions involve reading local project files such as Makefile, Dockerfile, and Go source code to identify build tags and dependencies, which is a standard operational surface for a development-focused agent.
  • [REMOTE_CODE_EXECUTION]: Provides a Dockerfile template that pulls the distroless image from a well-known service (gcr.io) for building secure, minimal production artifacts.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 18, 2026, 06:33 AM
Security Audit — agent-trust-hub — go-binary-size