golang-master
Pass
Audited by Gen Agent Trust Hub on Oct 3, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes standard Go development tools, including
go test,go vet,gofmt,staticcheck, andgolangci-lint, as part of its linting and benchmarking scripts. These tools are used appropriately for code analysis and performance measurement.\n- [EXTERNAL_DOWNLOADS]: Thescripts/lint.shscript includes ago mod tidycommand, which may fetch project dependencies from the Go proxy. The script maintains security by ensuring checksum verification is enabled viaGONOSUMCHECK=off.\n- [INDIRECT_PROMPT_INJECTION]: The skill has an attack surface where it processes content from a user's project directory. It mitigates risks by validating script arguments, such as benchmark patterns, against a strict whitelist of allowed characters.
Audit Metadata