goth-fundamentals
Warn
Audited by Gen Agent Trust Hub on Feb 16, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS] (MEDIUM): The skill recommends installing 'github.com/markbates/goth' via 'go get'. Since this repository is not on the predefined list of trusted GitHub organizations or repositories, it is classified as an unverifiable package installation.
- [CREDENTIALS_UNSAFE] (SAFE): The skill follows security best practices by using os.Getenv for client IDs and secrets, and it includes an explicit warning against committing .env files.
- [COMMAND_EXECUTION] (SAFE): The bash commands provided are limited to standard Go toolchain operations for package management.
- [PROMPT_INJECTION] (SAFE): No instructions designed to bypass safety filters or override agent behavior were found.
- [DATA_EXFILTRATION] (SAFE): No logic for unauthorized data collection or transmission to external domains was detected.
Audit Metadata