📦
Historial de auditorías
golang-lint - 1 auditoría
Versión de auditoría 1 Más reciente
6 sept 2026, 11:53
All 55 static alerts are false positives caused by Markdown, comments, standard configuration paths, defensive security terminology, or repository metadata. One medium-risk semantic issue remains: the installation guidance fetches an unpinned latest executable.
5
Archivos escaneados
814
Líneas analizadas
4
Elementos de revisión
0
Falsos positivos ignorados
Preocupaciones de seguridad confirmadas (1)
Medio
Unpinned Executable Installation
The installation command uses the moving latest version, so later runs can fetch and install different upstream code without review.
SKILL.md line 39 explicitly recommends go install with @latest. Pinning a reviewed version would reduce dependency substitution and reproducibility risk.
Factores de riesgo
⚙️ Comandos externos (40)
assets/.golangci.yml:80 assets/.golangci.yml:134 assets/.golangci.yml:135 evals/evals.json:35 evals/evals.json:155 SKILL.md:3 SKILL.md:29 SKILL.md:33 SKILL.md:34 SKILL.md:39 SKILL.md:45 SKILL.md:47 SKILL.md:51-69 SKILL.md:69-77 SKILL.md:77-79 SKILL.md:79-87 SKILL.md:87-91 SKILL.md:91 SKILL.md:92-93 SKILL.md:93 SKILL.md:100-101 SKILL.md:101-102 SKILL.md:102-103 SKILL.md:103 SKILL.md:107-116 SKILL.md:116-118 SKILL.md:118 SKILL.md:124-126 SKILL.md:126-131 SKILL.md:131-132 SKILL.md:132-138 SKILL.md:138 SKILL.md:139-140 SKILL.md:140-142 SKILL.md:142-143 SKILL.md:143 SKILL.md:149-157 SKILL.md:157-158 SKILL.md:158-159 SKILL.md:159-160
📁 Acceso al sistema de archivos (4)
🌐 Acceso a red (1)
Auditado por: codex