The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: Uses official GitHub Actions from the actions organization for code checkout and Go environment setup.
[EXTERNAL_DOWNLOADS]: References well-known third-party actions including golangci/golangci-lint-action, goreleaser/goreleaser-action, and aquasecurity/trivy-action for linting, releasing, and security scanning.
[REMOTE_CODE_EXECUTION]: Executes the official govulncheck tool from the golang.org repository to scan for vulnerabilities in reachable code paths.
[SAFE]: The skill instructions explicitly advocate for security best practices such as pinning action versions to specific tags or commit SHAs, implementing the principle of least privilege for workflow tokens, and protecting sensitive branches.

z-go-ci