golang-modernize

Pass

Audited by Gen Agent Trust Hub on Aug 6, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill promotes security best practices by prioritizing the migration to os.Root for directory-scoped file access and recommending the integration of govulncheck in CI pipelines.
  • [SAFE]: Shell tool usage is strictly scoped to the go, git, and golangci-lint binaries using the allowed-tools frontmatter, preventing arbitrary command execution outside of the Go development context.
  • [SAFE]: External data fetching is limited to trusted and well-known documentation sources, specifically official Go release notes on go.dev and the golangci-lint repository on GitHub.
  • [SAFE]: The skill includes explicit user consent checks and relies on isolated worktrees (EnterWorktree) for large-scale code modifications, ensuring that sweeping changes do not affect the main codebase without human review.
  • [SAFE]: References to external dependencies and related skills (samber/cc-skills-golang@*) are consistent with the author's namespace and focus on established Go ecosystem tools.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 6, 2026, 04:54 PM
Security Audit — agent-trust-hub — golang-modernize