Skill flagged — suspicious patterns detected
ClawHub Security flagged this skill as suspicious. Review the scan results before using.
Go Linter Configuration
v1.0.0Configure and troubleshoot golangci-lint for Go projects. Handle import resolution issues, type-checking problems, and optimize configurations for both local and CI environments.
⭐ 0· 1.8k·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The skill's name/description (golangci-lint configuration and troubleshooting) matches its declared requirements (go and golangci-lint). The provided CI examples, config snippets, and troubleshooting steps align with that purpose and do not require unrelated capabilities.
Instruction Scope
Runtime instructions are focused on linting, configuration, and CI integration (golangci-lint run, go mod download, .golangci.yml suggestions). They also recommend using remote install scripts (curl | sh). The instructions do not request environment secrets or access other system credentials, but they do assume access to project files (go.mod/go.sum) and to write/install Go tooling.
Install Mechanism
Install steps use official hosts (golang.org and raw.githubusercontent.com for golangci-lint). However, both metadata and README recommend piping remote scripts into sh and extracting a tarball into /usr/local. While common, executing scripts directly from the network and extracting installers are moderate operational risks and should be audited before running.
Credentials
The skill declares no required environment variables, credentials, or config paths beyond the expected binaries. Nothing requests unrelated secrets or broad environment access.
Persistence & Privilege
The skill is not always-enabled and uses the platform default for invocation. Installation may write to /usr/local or the user's GOPATH and could require elevated privileges (sudo) depending on the chosen install method — this is normal for installing Go but worth noting.
Assessment
This skill appears to do what it claims (configure and troubleshoot golangci-lint). Before installing: review any remote install scripts (don't blindly run curl | sh), prefer verified release downloads or your OS/package manager when possible, verify checksums for the Go tarball if you extract to /usr/local, and be aware installing to /usr/local may require sudo. No credentials are requested by the skill. If you want lower-risk setup, use your CI's official setup actions (e.g., actions/setup-go) or install golangci-lint via a package manager or by auditing the upstream install script first.Like a lobster shell, security has layers — review code before you run it.
latestvk978qghytgmyjkg1rbveswmbb980cy98
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
🔍 Clawdis
Binsgo, golangci-lint
