golang-cli

Pass

Audited by Gen Agent Trust Hub on Sep 14, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides standard Go development patterns and templates for building CLI applications. It correctly uses industry-standard libraries such as spf13/cobra for command structures and spf13/viper for configuration management.
  • [SAFE]: The skill promotes security best practices, including namespacing environment variables with SetEnvPrefix to avoid collisions and implementing strict positional argument validation using Cobra's built-in validators.
  • [SAFE]: I/O discipline is emphasized, distinguishing between stdout for pipeable data and stderr for diagnostics, which prevents data corruption in shell pipelines.
  • [SAFE]: The configuration in SKILL.md (specifically allowed-tools) restricts the agent's environment to necessary development tools (go, git, golangci-lint), following the principle of least privilege.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 14, 2026, 05:09 AM
Security Audit — agent-trust-hub — golang-cli