go-local-health
Pass
Audited by Gen Agent Trust Hub on Jun 13, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill facilitates the execution of Go development tools (
go,tparse,golangci-lint,lazygotest,gocovsh) and a provided shell script to automate local health checks. - [SAFE]: The helper script
scripts/go-local-healthincludes validation for the--scopeparameter, checking for whitespace, multi-line inputs, and leading dashes to prevent unintended command flag injection. - [SAFE]: The shell script uses double-quotes for variable interpolation (e.g.,
"$scope"), which correctly prevents word splitting and shell expansion of the variable's content, protecting against command substitution attacks. - [SAFE]: Instructions in
SKILL.mdandREADME.mdexplicitly mandate that the agent must confirm the existence ofgo.modand ask for user consent before installing any external tools or adding pins, maintaining a human-in-the-loop safety model.
Audit Metadata