Skills
Navigate
skills/reason-machines/trending-skills/gova-declarative-gui/Gen Agent Trust Hub

gova-declarative-gui

Fail

Audited by Gen Agent Trust Hub on Sep 14, 2026

Risk Level: HIGHEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPRIVILEGE_ESCALATION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill requires downloading a library and CLI tool from an unverified GitHub repository.
  • Evidence: The 'Install' section instructs the use of go get github.com/nv404/gova@latest and go install github.com/nv404/gova/cmd/gova@latest to fetch external code.
  • [COMMAND_EXECUTION]: The skill provides specific commands for a CLI tool that rebuilds and relaunches applications.
  • Evidence: The 'Key CLI Commands' section describes the use of gova dev, gova build, and gova run which execute compiled binaries locally.
  • [PRIVILEGE_ESCALATION]: The troubleshooting section provides instructions to use elevated privileges to install system packages.
  • Evidence: The skill explicitly lists sudo apt install build-essential libgl1-mesa-dev and sudo apt install libgl1-mesa-dev xorg-dev as necessary steps for Linux users.
Recommendations
  • AI detected serious security threats
Audit Metadata
Risk Level
HIGH
Analyzed
Sep 14, 2026, 10:36 AM