golang-script-developer
Pass
Audited by Gen Agent Trust Hub on Jul 26, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a collection of templates, best practices, and validation tools for Go development. All provided Go templates follow secure coding practices, such as context-aware cancellation, signal handling for graceful shutdown, and explicit error wrapping.
- [COMMAND_EXECUTION]: The skill includes a local shell script
scripts/validate-script.shused to score Go programs against a best-practices checklist. This script performs static analysis using standard tools likegrepand does not engage in network activity or persistence. - [EXTERNAL_DOWNLOADS]: The
go.modtemplate and reference documentation mention several standard and well-known Go libraries (e.g.,golang.org/x/sync,github.com/spf13/cobra,github.com/urfave/cli/v3). These are industry-standard dependencies for Go development and are referenced neutrally as part of the development workflow. - [DATA_EXFILTRATION]: No patterns indicative of data exfiltration or unauthorized network communication were found. The skill properly instructs the agent to use structured logging and separate diagnostics from primary program output.
- [PROMPT_INJECTION]: The skill instructions do not contain any attempts to override system prompts or bypass safety guidelines. It focuses purely on technical guidance for Go programming.
Audit Metadata