find-dead-code
Pass
Audited by Gen Agent Trust Hub on Jul 3, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads the deadcode tool from the official Go project repository at golang.org/x/tools. This is a standard procedure in Go development and utilizes a well-known and trusted source.
- [REMOTE_CODE_EXECUTION]: Utilizes the go run command to execute the deadcode utility directly from its official remote path. This execution is restricted to trusted project infrastructure within the Go ecosystem.
- [COMMAND_EXECUTION]: Executes local development commands including go build, go vet, staticcheck, and goimports to perform code analysis. These commands are necessary for the skill's functionality and are used for their intended purpose on the local codebase.
- [SAFE]: No malicious patterns such as obfuscation, credential exfiltration, or unauthorized persistence mechanisms were detected. The skill's behavior matches its description as a utility for finding dead code.
Audit Metadata