go-build-release
Pass
Audited by Gen Agent Trust Hub on Oct 16, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is entirely instructional, providing best practices for Go development workflows such as version stamping, cross-compilation, and reproducible builds.
- [SAFE]: All external tools and services referenced (e.g., GoReleaser, cosign, syft, ko, and various GitHub Actions) are well-known, industry-standard utilities for software supply chain security.
- [SAFE]: No malicious patterns such as prompt injection, obfuscation, data exfiltration, or unauthorized command execution were detected in the skill body or reference files.
- [SAFE]: The provided CI/CD workflow templates follow security best practices, such as using OIDC for keyless signing and recommending the pinning of actions.
Audit Metadata