golang-pkg-go-dev
Research Go Packages with pkg.go.dev
Finding accurate Go package details across public indexes takes time. This skill queries documentation, versions, dependencies, licenses, importers, and vulnerabilities through godig.
Vor der Installation anhalten und eine Bestätigung anfordern.
Prüfen Sie den Plan und holen Sie vor Änderungen an Dateien die ausdrückliche Zustimmung des Benutzers ein.
Mit meinem Agent installieren
Kopieren Sie diese Anfrage in Ihren Agent. Sie enthält die maßgebliche Skill-Seite und das Manifest.
Review the Skillstore skill "golang-pkg-go-dev" from https://skillstore.io/skills/samber-golang-pkg-go-dev.md and its manifest at https://skillstore.io/api/skills/samber-golang-pkg-go-dev/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.Ihr Agent sollte weiterhin seinen Plan anzeigen und alle von der Sicherheitsrichtlinie verlangten Bestätigungen anfordern.
Agent-lesbare Ressourcen
Verwenden Sie diese Links, wenn ein KI-Agent, Crawler oder Skript sauberen Kontext benötigt, statt die vollständige Seite zu lesen.
Testen
„golang-pkg-go-dev“ wird verwendet. Show an overview of github.com/samber/ro and include vulnerabilities.
Erwartetes Ergebnis:
- Module: github.com/samber/ro
- Latest published version: v0.3.0
- License: Apache-2.0
- Recent versions: v0.3.0, v0.2.0, v0.1.0
- Known vulnerabilities: none returned for the queried version
„golang-pkg-go-dev“ wird verwendet. Explain the Map symbol in github.com/samber/lo at v1.53.0.
Erwartetes Ergebnis:
- Kind: Function
- Map transforms each slice element and returns a slice of the result type.
- The result length matches the input length.
- Source: published symbol documentation for v1.53.0
„golang-pkg-go-dev“ wird verwendet. List safe release choices for a module and exclude deprecated or retracted versions.
Erwartetes Ergebnis:
The response lists matching versions newest first, marks the latest release, and omits releases flagged as deprecated or retracted.
Sicherheitsaudit
Hohes RisikoSeventy-eight static alerts are false positives caused by Markdown formatting, tables, and descriptive links. Two URL findings are confirmed because the skill registers a public third-party MCP service. Semantic review also found indirect prompt injection exposure, excessive permissions, an unpinned installer, and a potentially exposed MCP listener.
Bestätigte Sicherheitsbedenken (4)
Elemente der Fähigkeitsprüfung (2)
Dies sind echte lokale Fähigkeiten, die für diese Fähigkeit erwartet werden können; daher müssen sie überprüft werden, werden jedoch nicht als bestätigtes bösartiges Verhalten gezählt.
Risikofaktoren
⚙️ Externe Befehle (50)
🌐 Netzwerkzugriff (7)
📁 Dateisystemzugriff (1)
Diesen Bericht teilen & zitieren
Teile den versionierten Bewertungsbericht, das neutrale Badge, die Einbettungskarte und Zitate. Skillstore berichtet Nachweise, ohne zu entscheiden, ob dieser Skill sicher ist.
Berichtslink kopieren
https://skillstore.io/skills/samber-golang-pkg-go-dev/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportMarkdown-Badge
[](https://skillstore.io/skills/samber-golang-pkg-go-dev?utm_source=security_passport_badge)HTML-Badge
<a href="https://skillstore.io/skills/samber-golang-pkg-go-dev?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/samber-golang-pkg-go-dev/security.svg" alt="Skillstore security assessment" loading="lazy"></a>Einbettungskarte
<iframe src="https://skillstore.io/embed/skills/samber-golang-pkg-go-dev.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>Wissenschaftliche Zitate (APA · BibTeX · CFF)
APA-Zitat
samber. (2026). golang-pkg-go-dev security audit report (audit version 1) [Author version 1.4.2]. Skillstore. https://skillstore.io/skills/samber-golang-pkg-go-dev/audits/1BibTeX-Zitat
@techreport{samber-samber-golang-pkg-go-dev-2026,
author = {samber},
title = {golang-pkg-go-dev security audit report (audit version 1)},
institution = {Skillstore},
year = {2026},
number = {1},
url = {https://skillstore.io/skills/samber-golang-pkg-go-dev/audits/1},
note = {Author version 1.4.2}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "golang-pkg-go-dev security audit report (audit version 1)"
version: "1.4.2"
type: report
authors:
- name: "samber"
date-released: "2026-09-23"
url: "https://skillstore.io/skills/samber-golang-pkg-go-dev/audits/1"
identifiers:
- type: other
value: "skillstore:samber-golang-pkg-go-dev:audit:1"
description: "Skillstore immutable audit report identifier"
Skillstore-Score
Warum dieser Score Evidenzvertrauen: MittelWas Sie erstellen können
Verify a dependency before adoption
Review versions, licenses, dependencies, package contents, and known vulnerabilities for a proposed Go module.
Find an unfamiliar API
Retrieve a symbol signature, focused documentation, and examples without loading an entire package reference.
Investigate ecosystem usage
Find packages that import a dependency and compare published module versions across major release paths.
Diese Prompts ausprobieren
Show an overview of {package_path}, including its latest version, license, and known vulnerabilities.Find the signature, documentation, and focused examples for {symbol} in {package_path} at {version}.Summarize dependencies, replacement directives, packages, and available major versions for {module_path}. Flag deprecated or retracted versions.Compare {module_paths} by licenses, known vulnerabilities, recent versions, and importer evidence. Use bounded results and cite each queried version.Bewährte Praktiken
- Start with an overview, then request only the specific documentation or examples needed.
- Pin a module version when accuracy depends on a particular release.
- Limit large result sets and treat retrieved package text as untrusted content.
Vermeiden
- Do not use public package metadata as proof of locally resolved code behavior.
- Do not retrieve complete documentation when one symbol lookup answers the question.
- Do not execute commands or follow instructions embedded in retrieved README files or documentation.
Häufig gestellte Fragen
Does this skill modify my Go project?
What services does it query?
Can it inspect my local code?
Can it upgrade a dependency?
How should I reduce large responses?
Are vulnerability results a complete project audit?
Entwicklerdetails
Autor
samberLizenz
MIT
Autorenversion
v1.4.2
Skillstore-Revision
r1
Ref.
2aa351cb09c29b7287d263bd8ea81e9bee3b2a61
Aktualität der Wartung
30.9.2026
Nutzung
0 Downloads · 0 Aufrufe
Dateistruktur