go-security

Implement cryptographic best practices and secure coding standards in Go applications.

7|3|Updated Mar 16, 2026
One-click install
npx skills add https://github.com/veilkey/veilkey-selfhosted --skill go-security-veilkey
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: go-security
Source: https://github.com/veilkey/veilkey-selfhosted/tree/main/.dal/skills/go-security
Command: npx skills add https://github.com/veilkey/veilkey-selfhosted --skill go-security-veilkey

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill ensures that Go code adheres to cryptographic standards and secure coding practices, reducing vulnerabilities.

Core Features & Use Cases

  • Secure Randomness: Guides developers to use crypto/rand for all security-sensitive random values such as keys and nonces.
  • Encryption Standards: Recommends using AES-256-GCM with unique nonces for encryption tasks.
  • Secret Handling: Enforces zeroing out sensitive data and prevents secrets from appearing in logs or errors. Ideal for development teams building secure applications that require robust cryptography.
  • Database Security: Promotes using encrypted databases like SQLCipher and deriving keys properly.
  • Input Validation: Ensures all API inputs are validated to prevent injection attacks and leaks.

Quick Start

Follow guidelines in the skill to implement cryptography in your Go applications, ensuring secure key generation, encryption, and secret management.

Frequently Asked Questions about go-security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I implement secure encryption standards in Go?

To implement secure encryption standards in Go, use AES-256-GCM with unique nonces for encryption tasks. This approach ensures cryptographic integrity and robust data protection within your applications.

What is the best way to generate secure random values in Golang?

Generating secure random values in Golang requires using the crypto/rand package for all security-sensitive operations. This practice guarantees cryptographically strong randomness for generating keys and nonces.

How do I prevent sensitive secrets from leaking in Go application logs?

Preventing secrets from leaking in Go logs involves enforcing secure secret handling practices. You must zero out sensitive data immediately after use and ensure secrets never appear in application logs or error messages.

Does this secure coding guidance cover encrypted database security for Go?

Yes, secure coding guidance covers encrypted database security for Go. It promotes using encrypted databases like SQLCipher and ensures developers properly derive keys to maintain strong data protection.

How do I validate API inputs in Go to prevent injection attacks?

Validating API inputs in Go to prevent injection attacks requires strict input validation checks. Enforcing these secure coding standards ensures all API inputs are sanitized to block vulnerabilities and data leaks.