Security audit
golang-uber-dig
Security checks across malware telemetry and agentic risk
Overview
This is a coherent Go dependency-injection guidance skill with no hidden execution, persistence, credential handling, or unrelated data access in the inspected artifacts.
Before installing, expect this skill to help modify Go code and possibly suggest adding `go.uber.org/dig` when you are adopting that library. Review generated code changes as usual, especially dependency wiring and startup behavior, but the inspected skill itself does not show hidden or disproportionate security behavior.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
64/64 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.