go-security

Community

Secure Go apps with proven security practices.

Authorscruffydan
Version1.0.0
Installs0

System Documentation

What problem does it solve?

Go applications commonly suffer from security issues such as unsafe template rendering, SQL injection, weak randomness, insecure TLS configurations, and insufficient input validation. This Skill provides a concise, practical checklist to harden Go services by encouraging safe coding practices and secure configurations.

Core Features & Use Cases

  • Enforces safe HTML templating with html/template to prevent XSS
  • Promotes parameterized SQL queries and prepared statements to prevent SQL injection
  • Encourages proper cryptographic randomness using crypto/rand and secure token handling
  • Enforces TLS usage, certificate validation, and modern protocol configurations
  • Emphasizes input validation and robust error handling
  • Integrates with static analysis tools (gosec, go vet, golangci-lint) to catch issues early

Quick Start

Open a Go project and perform a security review focusing on template rendering, database access, and TLS configuration, then apply the recommended fixes.

Dependency Matrix

Required Modules

None required

Components

Standard package

💻 Claude Code Installation

Recommended: Let Claude install automatically. Simply copy and paste the text below to Claude Code.

Please help me install this Skill:
Name: go-security
Download link: https://github.com/scruffydan/AI-Agents/archive/main.zip#go-security

Please download this .zip file, extract it, and install it in the .claude/skills/ directory.
View Source Repository

Agent Skills Search Helper

Install a tiny helper to your Agent, search and equip skill from 471,000+ vetted skills library on demand.