cobra-patterns

Pass

Audited by Gen Agent Trust Hub on Jun 29, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONREMOTE_CODE_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The setup-cobra-cli.sh script fetches the spf13/cobra library from its official GitHub repository using the standard go get tool. This is a common and expected operation for Go project initialization.
  • [COMMAND_EXECUTION]: The skill includes several shell scripts (setup-cobra-cli.sh, add-command.sh, validate-cobra-cli.sh, generate-completions.sh) that use system commands like mkdir, cat, sed, and grep to automate the creation and modification of local Go source files and directories.
  • [REMOTE_CODE_EXECUTION]: The generate-completions.sh script executes the compiled binary of the CLI being developed to generate shell completion files (bash/zsh/fish/powershell). This involves running local code generated by the skill's templates, which is a standard part of the CLI development lifecycle.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 29, 2026, 02:12 PM
Security Audit — agent-trust-hub — cobra-patterns