Audit Go source files for DoS and resource exhaustion vulnerabilities.
npx skills add https://github.com/yhy0/ghsa-skill-builder --skill go-vuln-dos
Please help me install this Agent Skill. Skill: go-vuln-dos Source: https://github.com/yhy0/ghsa-skill-builder/tree/main/vuln-skills/skills/go-vuln-dos Command: npx skills add https://github.com/yhy0/ghsa-skill-builder --skill go-vuln-dos
This Skill helps identify and prevent Denial of Service (DoS) and resource exhaustion vulnerabilities in Go applications, ensuring stability and availability.
Use the go-vuln-dos skill to audit the provided Go code for potential denial of service vulnerabilities.
High-intent search queries and answers about installing and using this skill.
Static analysis of Go source files identifies insecure practices like unbounded reads and unhandled panics to detect resource exhaustion vulnerabilities. It traces external inputs to sinks to find patterns causing excessive resource consumption.
Unvalidated external inputs allow attackers to send excessively large HTTP request bodies or deeply nested data structures, causing unbounded memory allocations that crash the Go web service and create denial of service conditions.
To audit Go source files, perform static analysis to trace data from sources to sinks and check for sanitization gaps. This identifies unbounded reads, unhandled panics, and resource exhaustion patterns matching CWE-400 and CWE-770.
Yes, static analysis can find channel deadlocks and unhandled panics in Go applications. It identifies insecure resource management practices that lead to goroutine leaks and application crashes, ensuring service stability and availability.
Static analysis for preventing DoS attacks in Go is limited to detecting known insecure patterns like unbounded reads, resource leaks, and sanitization gaps within the source code. It requires direct access to Go source files and may miss novel runtime vectors.
juniorfonteneleEnforce idiomatic Go patterns, quality gates, and testing guidelines for Go projects.
DevelopersCoffeeRemediates CWE-400 vulnerabilities in Java code by enforcing limits and streaming for uploads, collections, and external operations.
kristovatlasTrace untrusted inputs to security sinks in web applications.
Harmeet10000Automate Go CI/CD pipelines with GitHub Actions for testing, linting, and releases.
