viper
Pass
Audited by Gen Agent Trust Hub on Oct 14, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill consists of instructional documentation and Go code examples for implementing configuration loading using the spf13/viper library.
- [SAFE]: External links point to official library documentation, the official Viper GitHub repository, and other developer resources owned by the author (tpscloud).
- [SAFE]: The recommended code patterns explicitly promote secure practices, such as using
UnmarshalExactto prevent unknown key injection and implementing aValidate()function to sanitize configuration inputs. - [SAFE]: The skill includes specific advice on handling secrets, such as identifying environment-only keys that should not be written back to configuration files, which prevents accidental credential exposure.
Audit Metadata