security-scan
Pass
Audited by Gen Agent Trust Hub on Nov 2, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill facilitates the installation of the Go vulnerability checker from the official golang.org repository, ensuring the agent uses an up-to-date and trusted scanning tool.
- [COMMAND_EXECUTION]: Utilizes a suite of command-line utilities including Go, Node.js, Gitleaks, and the GitHub CLI to perform multi-layered security audits of the codebase and its environment.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from GitHub's security advisory and alert APIs. This external data is processed using structured queries (via jq) to generate findings, minimizing the risk of instructions in the data influencing the agent's behavior.
- [DATA_EXPOSURE]: Includes instructions for the agent to actively scan for and prevent the accidental inclusion of sensitive credentials (such as cookies, tokens, and private keys) in the repository's history and documentation.
Audit Metadata