go-development
Pass
Audited by Gen Agent Trust Hub on Apr 22, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill includes dynamic context injection in
SKILL.mdto verify the presence oflefthook, a legitimate development tool for managing git hooks. This operation is scoped to environment verification and does not perform any sensitive or unauthorized actions.- [SAFE]: Tool access is scoped to the standard Go development ecosystem, requestingBashcapabilities forgo,make,docker, andgolangci-lint. These tools are necessary and expected for the skill's primary function of building and testing Go applications.- [SAFE]: The skill instructions facilitate the processing of local source code and test results. While this creates a surface for indirect prompt injection, it is a standard requirement for development skills, and the instructions do not include any patterns that attempt to bypass safety filters or perform restricted operations.- [SAFE]: The skill promotes the use of well-known and reputable libraries such asgithub.com/go-ldap/ldap/v3andgithub.com/fsouza/go-dockerclient, as well as vendor-authored resources likegithub.com/netresearch/go-cron. All external references align with the skill's stated purpose.
Audit Metadata