golang-script-developer

Pass

Audited by Gen Agent Trust Hub on Jul 26, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill is a collection of templates, best practices, and validation tools for Go development. All provided Go templates follow secure coding practices, such as context-aware cancellation, signal handling for graceful shutdown, and explicit error wrapping.
  • [COMMAND_EXECUTION]: The skill includes a local shell script scripts/validate-script.sh used to score Go programs against a best-practices checklist. This script performs static analysis using standard tools like grep and does not engage in network activity or persistence.
  • [EXTERNAL_DOWNLOADS]: The go.mod template and reference documentation mention several standard and well-known Go libraries (e.g., golang.org/x/sync, github.com/spf13/cobra, github.com/urfave/cli/v3). These are industry-standard dependencies for Go development and are referenced neutrally as part of the development workflow.
  • [DATA_EXFILTRATION]: No patterns indicative of data exfiltration or unauthorized network communication were found. The skill properly instructs the agent to use structured logging and separate diagnostics from primary program output.
  • [PROMPT_INJECTION]: The skill instructions do not contain any attempts to override system prompts or bypass safety guidelines. It focuses purely on technical guidance for Go programming.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 26, 2026, 02:36 PM
Security Audit — agent-trust-hub — golang-script-developer