Security audit
Security checks for vulnerabilities and agentic risk
This is a coherent Go documentation skill for the samber/mo library; the flagged items are code examples, not hidden runtime behavior.
Safe to install for Go projects using or evaluating samber/mo. Review generated code before running it, especially examples involving `go get`, `git`, database writes, file reads, or HTTP calls, because those actions can affect your project when you explicitly ask the agent to implement them.
Skill manipulates agent memory, state, or stored context. Memory corruption can alter personality, override safety rules, or cause unpredictable behavior.
// Get — return current state as result
getter := mo.NewState(func(s int) (int, int) { return s, s })
// Put — replace state
putter := state.Put(100)
_, s := putter.Run(0) // (_, 100)
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
te := mo.NewTaskEither(func() *mo.Future[string] {
return mo.NewFuture(func(resolve func(string), reject func(error)) {
resp, err := http.Get("https://api.example.com/data")
if err != nil {
reject(err)
return
This markdown file includes a TaskEither example that calls http.Get and reads a remote response body, which demonstrates network transmission behavior. The surrounding documentation does not warn that the example contacts an external service or may transmit system/user data, so the network-affecting behavior is undisclosed in the skill description.
No suspicious patterns detected.