dbos-golang
Warn
Audited by Gen Agent Trust Hub on Feb 16, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [Unverifiable Dependencies & Remote Code Execution] (MEDIUM): The skill instructs installation of the core Go module using 'go get github.com/dbos-inc/dbos-transact-golang/dbos@latest'. As 'dbos-inc' is not a pre-approved trusted source, this is flagged as an unverifiable dependency. No suspicious remote execution patterns (like piping to a shell) were found.
- [Data Exposure & Exfiltration] (LOW): The skill demonstrates retrieving database connection strings via environment variables ('os.Getenv') rather than hardcoding them. Network examples use generic URLs and do not exfiltrate sensitive data.
- [Prompt Injection] (SAFE): No instructions attempting to override agent behavior or bypass safety filters were identified.
- [Obfuscation] (SAFE): No use of Base64 encoding for commands, zero-width characters, or homoglyphs was detected.
Audit Metadata