configure-sdk-options
Warn
Audited by Gen Agent Trust Hub on Feb 16, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS] (MEDIUM): Documentation in go.md recommends installing ifacemaker and mockery via go install using the @latest version tag from GitHub repositories (vburenin/ifacemaker and vektra/mockery). These sources are not on the trusted repository list and unversioned downloads from external sources represent a supply chain risk.
- [SAFE] (INFO): No active malicious logic, prompt injection, or data exfiltration patterns were identified across the 7 documentation files. The skill consistently uses placeholders like 'your-api-key' and environment variable patterns for authentication, adhering to documentation safety standards.
Audit Metadata