configure-sdk-options
Warn
Audited by Gen Agent Trust Hub on Feb 16, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS] (MEDIUM): Documentation instructs users to install external Go tools from GitHub repositories not included in the trusted list. * Evidence:
go install github.com/vburenin/ifacemaker@latestin content/languages/go.md. * Evidence:go install github.com/vektra/mockery/v2@latestin content/languages/go.md. - [EXTERNAL_DOWNLOADS] (LOW): Documentation references dependencies from trusted organizations like Google. * Evidence:
com.google.code.gson:gson:2.10.1in content/languages/java.md. - [COMMAND_EXECUTION] (LOW): Examples provide instructions for bypassing SSL certificate verification for local development across several languages, which can be insecure if implemented in production. * Evidence:
verify_ssl=Falsein python.md,InsecureSkipVerifyin go.md, andverify => falsein php.md.
Audit Metadata