nix-private-go-repos

Pass

Audited by Gen Agent Trust Hub on Aug 12, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill uses external resources from the author's GitHub organization (github.com/LarsArtmann), which aligns with its primary purpose of managing private dependencies for LarsArtmann-based projects.
  • [SAFE]: The instructions for setting up CI authentication and SSH keys for private repository access follow standard security practices for GitHub Actions and Nix.
  • [SAFE]: The provided helper script scripts/list-private-deps.sh safely processes local go.mod files using standard utilities like grep, awk, and sed to generate Nix configuration snippets.
  • [SAFE]: Recommended configuration changes, such as Go GOPRIVATE settings and Git insteadOf rewrites, are standard industry practices for managing private modules and do not introduce security vulnerabilities.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 12, 2026, 08:06 AM