Enforce security best practices in Go web services and authentication flows.
npx skills add https://github.com/scruffydan/AI-Agents --skill go-security
Please help me install this Agent Skill. Skill: go-security Source: https://github.com/scruffydan/AI-Agents/tree/main/source/skills/go-security Command: npx skills add https://github.com/scruffydan/AI-Agents --skill go-security
Go applications commonly suffer from security issues such as unsafe template rendering, SQL injection, weak randomness, insecure TLS configurations, and insufficient input validation. This Skill provides a concise, practical checklist to harden Go services by encouraging safe coding practices and secure configurations.
Open a Go project and perform a security review focusing on template rendering, database access, and TLS configuration, then apply the recommended fixes.
High-intent search queries and answers about installing and using this skill.
Prevent SQL injection in Go web services by using parameterized queries and prepared statements with the database/sql package. This enforces strict separation between SQL code and user input, blocking malicious data execution.
Prevent XSS in Golang HTML templates by using the html/template package. It provides contextual auto-escaping for template rendering, ensuring user-supplied data is safely sanitized before output to the browser.
Configure secure TLS and crypto randomness in Go applications by enforcing modern protocol configurations, strict certificate validation, and using the crypto/rand package for generating secure tokens and robust randomness.
Yes, you can use gosec and go vet for static analysis to check Go security vulnerabilities. Integrating these tools with golangci-lint configurations catches unsafe code patterns, input validation issues, and template safety risks early.
Static analysis limitations in Go security mean tools like gosec may miss complex runtime vulnerabilities or logic flaws in authentication flows. You must complement automated checks with robust input validation and secure coding practices.
ozan-fnScan Golang code for vulnerabilities using govulncheck and golangci-lint.
dennisonbertramIdentify Go security vulnerabilities using GoSec static analysis.
EIS-ITSGenerate secure, optimized database queries with parameterized statements, eager loading, indexing, and transactions.
statick88Scan codebases for security vulnerabilities, dependency issues, and secret exposure.
