golang-spf13-viper
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides educational content and code examples for the well-known and trusted Go library
spf13/viper. The instructions cover standard implementation patterns including precedence rules, environment variable mapping, struct unmarshalling, and test isolation. No malicious code or commands are present in the skill. - [INDIRECT_PROMPT_INJECTION]: The skill describes how to ingest data from external sources such as environment variables and configuration files. This is a standard functional requirement for a configuration library. The documentation correctly identifies this as a potential source of errors and mitigates risks by recommending validation logic during configuration reloads and demonstrating how to handle missing files securely.
- [EXTERNAL_DOWNLOADS]: The skill references official and widely-used Go packages like
github.com/spf13/viperandgithub.com/mitchellh/mapstructure. These are recognized industry-standard libraries, and their use in this context is appropriate and documented using neutral, non-alarming language.
Audit Metadata