The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill instructions and metadata specify the installation of the official Go language server via go install golang.org/x/tools/gopls@latest. This dependency originates from a well-known, trusted repository managed by the Go development team.
[COMMAND_EXECUTION]: The skill utilizes the gopls binary through CLI, MCP, and LSP interfaces to perform standard code intelligence tasks such as finding definitions, references, and performing safe renames. These operations are limited to the local build environment and are typical for development tools.
[INDIRECT_PROMPT_INJECTION]: The skill processes local Go source files for analysis. While source code and comments can contain arbitrary text, the skill relies on the semantic analysis provided by gopls and follows structured workflows, which minimizes the risk of the agent misinterpreting code comments as instructions. Boundary markers and explicit workflows for reading and editing are documented to guide safe agent behavior.
[DATA_EXFILTRATION]: No patterns of unauthorized data transmission were found. The skill operates on the local build and workspace, and while gopls may interact with proxy.golang.org for module resolution, this is standard and expected behavior for the Go toolchain.

golang-gopls