go-craftsman
Pass
Audited by Gen Agent Trust Hub on Sep 26, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [SAFE]: The skill provides high-quality educational content and reference code for building robust and secure Go applications. All analyzed code follows defensive programming principles, such as SSRF prevention and symlink-safe path traversal.
- [COMMAND_EXECUTION]: The skill includes reference implementations for executing subprocesses safely using the
os/execpackage. These examples correctly use slice-based argument passing to prevent command injection and implement strict resource controls, including context-based timeouts and bounded output readers to mitigate denial-of-service risks. - [EXTERNAL_DOWNLOADS]: The instructions and examples reference official Go extended library packages (e.g.,
golang.org/x/sync/errgroup). These are trusted, standard components of the Go ecosystem maintained by the Go team.
Audit Metadata