The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill fetches the vulnerability scanner govulncheck from the official Go sub-repository (golang.org/x/vuln) and uses the golangci-lint-action from the official repository. These are trusted and well-known sources within the Go development ecosystem.
[COMMAND_EXECUTION]: The instructions involve executing standard Go toolchain commands (e.g., go build, go test, go vet) and git to set up and verify the CI pipeline. These operations are core to the skill's functionality and restricted to the expected toolset.
[INDIRECT_PROMPT_INJECTION]: The skill processes project-specific data such as go.mod files and coverage reports (coverage.out). The logic for parsing this data—specifically the awk scripts for coverage gating—is static and does not provide a path for instruction injection or command execution from the processed data.

go-ci