go-security

Enforce secure coding practices in Go applications.

Updated Aug 23, 2026
One-click install
npx skills add https://github.com/d3fvxl/.dotfiles --skill go-security-d3fvxl
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: go-security
Source: https://github.com/d3fvxl/.dotfiles/tree/main/config/opencode/skills/go-security
Command: npx skills add https://github.com/d3fvxl/.dotfiles --skill go-security-d3fvxl

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Go security patterns and vulnerability prevention provide clear guidance to write safe Go applications, reducing risks from common flaws.

Core Features & Use Cases

  • Security best practices for input handling, authentication, authorization, data access, and cryptography.
  • Practical patterns for safe API design, secure HTTP handling, and secure configuration management.
  • Use Case: When building a Go web service, apply secure coding patterns to validate inputs, use parameterized queries, manage secrets securely, and enforce TLS.

Quick Start

Write a small example demonstrating input validation and safe database access in a Go HTTP handler and run it to verify secure patterns in your codebase.

Frequently Asked Questions about go-security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I validate inputs and prevent SQL injection in a Go web service?

Validate inputs in a Go web service by applying secure coding patterns that enforce strict input validation and parameterized queries to prevent SQL injection vulnerabilities. This ensures safe database access within HTTP handlers.

What are the best practices for TLS configuration and secret management in Go microservices?

Best practices for TLS configuration and secret management in Go microservices involve enforcing proper TLS settings and secure configuration management to protect data. These patterns ensure safe handling of cryptographic operations across services.

How does safe error handling work when building authentication flows in Go?

Safe error handling in Go authentication flows works by applying secure coding patterns that prevent sensitive data leakage during API interactions. It ensures vulnerabilities are mitigated during authentication and authorization processes.

Can I use these secure coding patterns for CLI tools or only web services?

You can use these secure coding patterns for both web services and CLI tools. The patterns apply secure practices across diverse Go applications, ensuring safe data handling and cryptography regardless of the application type.

Why do I need parameterized queries for database access in Go applications?

You need parameterized queries for database access in Go applications to prevent common security flaws like SQL injection. This secure coding practice ensures safe data handling and mitigates vulnerabilities during database operations.