Identify and remediate Go backend security vulnerabilities via static analysis.
npx skills add https://github.com/MAF2414/kyco --skill go-security-audit
Please help me install this Agent Skill. Skill: go-security-audit Source: https://github.com/MAF2414/kyco/tree/main/.claude/skills/go-security-audit Command: npx skills add https://github.com/MAF2414/kyco --skill go-security-audit
Go backends often suffer from security flaws that go undetected during development, leading to vulnerabilities in authentication, data handling, and deployment. This skill provides a structured Go security audit focusing on common pitfalls and language-specific patterns.
Run the Go security audit across your repository to surface actionable findings and secure coding recommendations.
High-intent search queries and answers about installing and using this skill.
To scan Go backend code for security vulnerabilities, run a static analysis audit across your repository to identify insecure patterns in SQL, os/exec, file paths, and crypto usage. The audit flags these weaknesses and provides secure coding recommendations.
Common Go backend security flaws include SQL injection, command injection via os/exec, path traversal, race conditions, error handling issues, and crypto pitfalls. Static analysis targets these language-specific weaknesses to prevent vulnerabilities in authentication and data handling.
Yes, you can get remediation examples for insecure Go code patterns. The static analysis flags vulnerable code and provides practical examples comparing secure versus insecure implementations alongside recommended fixes to correct the identified weaknesses.
Yes, this Go security audit checks for race conditions and crypto pitfalls. It analyzes repository code for Go-specific concurrency issues and improper crypto usage, flagging these insecure patterns and providing recommended fixes to secure the backend service.
The best way to detect command injection vulnerabilities in Go projects is by running a static analysis audit focused on os/exec usage. This identifies insecure patterns where external commands are executed and provides recommended fixes to secure the code.
uukuguyCalculate complexity, size, coupling, and duplication metrics from source code.
erenisiklarDetect 11 vulnerability patterns in Algorand TEAL/PyTeal smart contracts.
srnicholsScan Go module dependencies for vulnerabilities, outdated packages, and license issues.
vertivolatamRun static analysis across multiple programming languages with linters and security scanners.
