goss
Pass
Audited by Gen Agent Trust Hub on Jun 26, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions to download the
gossbinary and thedgosswrapper script from the officialgoss-orgGitHub organization. This follows standard distribution practices for this tool. - [COMMAND_EXECUTION]: The installation process involves using
chmod +rxto set executable permissions on the downloaded binaries. - [COMMAND_EXECUTION]: Documentation for the
commandresource type explains how to execute arbitrary shell commands for system state validation. - [DATA_EXFILTRATION]: The skill describes the
httpresource type, which enables making outbound network requests to verify HTTP status codes and response content. - [REMOTE_CODE_EXECUTION]: The skill details the use of Go templates and Sprig functions to dynamically generate validation logic, including the ability to access environment variables and control test execution flow.
Audit Metadata