backend-go-cli
Pass
Audited by Gen Agent Trust Hub on Nov 9, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references several widely used and trusted open-source Go libraries, including
spf13/cobrafor command structures andspf13/viperfor configuration management. These are standard industry dependencies for Go CLI development. - [INDIRECT_PROMPT_INJECTION]: The skill describes how to build tools that ingest external data (environment variables, command-line flags, and configuration files). While this represents the standard input surface for CLI applications, the skill correctly emphasizes validation and structured handling of such data.
- [COMMAND_EXECUTION]: The skill uses the
Bashtool with restricted scopes (e.g.,go:*,git:*,golangci-lint:*) to facilitate Go development tasks. These permissions are appropriate for the stated purpose of building and testing Go applications. - [SAFE]: The provided code examples follow security best practices, such as using
signal.NotifyContextfor graceful shutdowns and ensuring that sensitive configuration layering follows a predictable precedence (flags > env > config file).
Audit Metadata