cobra-patterns
Pass
Audited by Gen Agent Trust Hub on Jun 29, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONREMOTE_CODE_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The
setup-cobra-cli.shscript fetches thespf13/cobralibrary from its official GitHub repository using the standardgo gettool. This is a common and expected operation for Go project initialization. - [COMMAND_EXECUTION]: The skill includes several shell scripts (
setup-cobra-cli.sh,add-command.sh,validate-cobra-cli.sh,generate-completions.sh) that use system commands likemkdir,cat,sed, andgrepto automate the creation and modification of local Go source files and directories. - [REMOTE_CODE_EXECUTION]: The
generate-completions.shscript executes the compiled binary of the CLI being developed to generate shell completion files (bash/zsh/fish/powershell). This involves running local code generated by the skill's templates, which is a standard part of the CLI development lifecycle.
Audit Metadata