Provides comprehensive Golang code reviews for Git merge commits, checking format, quality, best practices, security, and generating detailed Markdown reports.

This skill is not clearly what it claims: the description promises full, commit-aware static analysis but the included program only performs simple, file-level, line-based heuristics and doesn't call staticcheck/errcheck or inspect Git diffs. That likely means it's incomplete or misleading rather than malicious, but you should not rely on it for security reviews. Before installing or using it: - Treat it as untrusted/experimental: run it on non-sensitive code and inspect outputs first. - If you need true static analysis, prefer tools that explicitly invoke and return results from staticcheck/errcheck/gofmt, or add code to this skill to call those tools and handle their outputs. - Be aware the report logic is buggy (many rules are unimplemented and may produce empty/incorrect issue entries); review index.go or test it locally. - Confirm whether you (or the agent) will run the external linters the SKILL.md recommends — the skill does not run them itself. If you want to change this assessment, provide updated code that actually invokes the declared linters or processes Git diffs/merge commits, or a clear rationale why file-level checks meet the stated merge-review purpose.

Type: OpenClaw Skill Name: golang-code-review Version: 1.0.0 The skill bundle provides a basic Golang code review tool. The core logic in `index.go` performs simple static analysis, such as checking for unhandled errors and unused imports, while `SKILL.md` and `config.md` provide instructions for integrating standard Go linting tools like `staticcheck` and `gofmt`. Although the implementation is rudimentary and contains a minor syntax error in `index.go`, there is no evidence of malicious intent, data exfiltration, or unauthorized execution.