Security audit
Go
Security checks across malware telemetry and agentic risk
Overview
This is a Go programming guidance skill with disclosed, narrow local preference storage and no executable install or hidden runtime behavior.
Review the preference file behavior before installing: the skill may record stated Go workflow preferences under ~/Clawic/data/go/config.yaml. Its examples may lead an agent to run normal Go tooling such as tests, builds, module commands, or local profiling when relevant, so use it in repositories where those actions are acceptable.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
63/63 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.