go-version-manager
Pass
Audited by Gen Agent Trust Hub on Aug 21, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The script executes locally discovered Go binaries and environment managers (such as goenv, mise, or asdf) to verify toolchain versions and run subcommands.
- [SAFE]: The skill maintains a restricted scope by explicitly refusing to modify system-wide symlinks, shell profiles, or global PATH settings unless requested by the user.
- [SAFE]: The execution logic uses quoted variables and existence checks for discovered binaries, preventing common shell injection patterns during the selection and execution process.
- [SAFE]: The skill avoids supply chain risks by documentation-level guidance against automatic tool installation and providing instructions to verify dependency changes via git diffs.
Audit Metadata