go-release
Pass
Audited by Gen Agent Trust Hub on Jul 11, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the agent to run several official Go utilities using
go run. These includegolang.org/x/exp/cmd/gorelease@latest,golang.org/x/exp/cmd/apidiff@latest, andgolang.org/x/vuln/cmd/govulncheck@latest. All of these originate from the official Google/Golang project domains and repositories, which are recognized as trusted and well-known services. - [COMMAND_EXECUTION]: The skill provides standard development commands for Go project hygiene and release management (e.g.,
go mod tidy,go build,go test,git tag). These are necessary for the skill's primary purpose of managing software releases and do not include any dangerous or unauthorized execution patterns. - [PROMPT_INJECTION]: No evidence of prompt injection, role-play instructions, or attempts to bypass safety filters was found. The instructions are focused on providing technical guidance for Go developers.
- [DATA_EXFILTRATION]: No network operations to non-whitelisted domains or sensitive file access patterns were detected. The use of official Go tools for vulnerability scanning and API diffing is a standard and safe practice.
Audit Metadata