go-review

Review Go code for idiomatic patterns, error handling, concurrency safety, and performance.

7|Updated Mar 19, 2026
One-click install
npx skills add https://github.com/camilooscargbaptista/cto-toolkit --skill go-review-camilooscargbaptista
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: go-review
Source: https://github.com/camilooscargbaptista/cto-toolkit/tree/main/go-review
Command: npx skills add https://github.com/camilooscargbaptista/cto-toolkit --skill go-review-camilooscargbaptista

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill removes inconsistency and uncertainty from Go code reviews by providing a structured, expert checklist that identifies idiomatic issues, error-handling anti-patterns, concurrency risks, and performance pitfalls so teams can ship robust Go services.

Core Features & Use Cases

  • Idiomatic guidance: Checks naming, package layout, interface design, receiver conventions, and export boundaries.
  • Error handling: Detects ignored errors, recommends error wrapping with contextual messages and %w, and highlights when sentinel or custom error types are appropriate.
  • Concurrency safety: Identifies race conditions, goroutine leaks, improper synchronization, missing context propagation, and unsafe channel usage.
  • Performance & testing: Suggests slice preallocation, reduced allocations in hot paths, appropriate use of pointers vs values, table-driven tests, benchmarks, and httptest usage.
  • Security & project structure: Flags SQL/command/path injection patterns, hard-coded secrets, TLS misconfigurations, and suggests idiomatic project layout for maintainability.
  • Use case: Run this Skill on a microservice repo using gin or grpc-go to get a prioritized report of critical concurrency issues, ignored errors, and test coverage gaps before merging a feature.

Quick Start

Review the repository's Go files for idiomatic patterns, error handling issues, concurrency risks, and performance improvements.

Frequently Asked Questions about go-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I review Go code for concurrency safety and race conditions?

Review Go code for concurrency safety by inspecting goroutine management, synchronization, and channel usage to identify race conditions, goroutine leaks, and missing context propagation before merging.

What is the best way to check for idiomatic error handling in a Go microservice?

Checking for idiomatic error handling in a Go microservice involves scanning .go files for ignored errors, verifying proper error wrapping with %w, and ensuring contextual messages or sentinel errors are applied correctly.

How do I find performance issues and reduce allocations in Go hot paths?

Find performance issues in Go hot paths by analyzing source files for efficient slice preallocation, appropriate pointer versus value usage, and reduced allocations to optimize overall application throughput.

Can I run a Go code review on a gRPC or Gin project repository?

Yes, you can run Go code reviews on projects built with Gin, Echo, Fiber, or gRPC-go by inspecting the repository's .go files and go.mod to identify structural and security issues.

How do I detect security vulnerabilities like SQL injection in Go code?

Detect security vulnerabilities in Go code by scanning for SQL, command, and path injection patterns, identifying hard-coded secrets, and flagging TLS misconfigurations to ensure robust service security.

What are common limitations when checking Go test coverage and benchmarks?

Limitations when checking Go test coverage include relying on static .go file inspection to suggest table-driven tests, benchmarks, and httptest usage without executing the test suite to verify runtime behavior.