golang-master

Pass

Audited by Gen Agent Trust Hub on Oct 3, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes standard Go development tools, including go test, go vet, gofmt, staticcheck, and golangci-lint, as part of its linting and benchmarking scripts. These tools are used appropriately for code analysis and performance measurement.\n- [EXTERNAL_DOWNLOADS]: The scripts/lint.sh script includes a go mod tidy command, which may fetch project dependencies from the Go proxy. The script maintains security by ensuring checksum verification is enabled via GONOSUMCHECK=off.\n- [INDIRECT_PROMPT_INJECTION]: The skill has an attack surface where it processes content from a user's project directory. It mitigates risks by validating script arguments, such as benchmark patterns, against a strict whitelist of allowed characters.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 3, 2026, 08:56 AM