skills.rest
Jylhis
JylhisCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

golang-security

Detect Go vulnerabilities using govulncheck, static analysis, and DREAD scoring.

1|Updated Apr 4, 2026
Search Tags:#security#vulnerability#go#static-analysis#code-review#govulncheck
One-click install
npx skills add https://github.com/Jylhis/claude-marketplace --skill golang-security-jylhis
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: golang-security
Source: https://github.com/Jylhis/claude-marketplace/tree/main/plugins/golang-dev/skills/golang-security
Command: npx skills add https://github.com/Jylhis/claude-marketplace --skill golang-security-jylhis

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This skill provides comprehensive security guidance for Go code, helping developers prevent injection, cryptography, filesystem, network, and concurrency vulnerabilities throughout the development lifecycle.

Core Features & Use Cases

  • Review mode: Sequentially examines pull‑request diffs to trace data flows and flag issues.
  • Audit mode: Scans entire codebases in parallel, categorizing findings with DREAD severity.
  • Coding mode: Guides secure implementation while optionally background‑checking new code.
  • Tool integration: Leverages govulncheck, static analysis linters, and custom scripts for automated detection.

Quick Start

Invoke the golang-security skill to review the changed files in a pull request for security issues.

Frequently Asked Questions about golang-security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I detect Go code vulnerabilities during a pull request code review?▼

To detect Go code vulnerabilities during a review, sequentially examine pull-request diffs to trace data flows and flag injection, cryptography, and concurrency flaws. This process uncovers security issues directly within the development lifecycle.

What is the best way to audit a Go codebase for security flaws and prioritize fixes?▼

Auditing a Go codebase for security flaws involves scanning the entire codebase in parallel and categorizing findings using DREAD severity scoring. This prioritization method highlights the most critical vulnerabilities for remediation.

Does govulncheck work with static analysis tools to find Go concurrency and injection flaws?▼

Yes, govulncheck integrates with static analysis linters and custom scripts to automate Go vulnerability detection. This combination effectively identifies injection, filesystem, network, and concurrency vulnerabilities.

Can I enforce secure Go coding practices while writing new code?▼

You can enforce secure Go coding practices by using a coding mode that guides secure implementation while optionally running background checks on new code. This prevents security vulnerabilities proactively during development.

How does DREAD scoring prioritize Go security vulnerabilities found during an audit?▼

DREAD scoring prioritizes Go security vulnerabilities by categorizing audit findings based on damage, reproducibility, exploitability, affected users, and discoverability. This severity ranking directs remediation efforts effectively.

Related Skills

Explore More Software Engineering Skills→
MolcajeteAIMolcajeteAI
2

security-scanning

Scan Go projects with gosec and govulncheck for security vulnerabilities.

Official
Intermediate
Marshall-HallenbeckMarshall-Hallenbeck
5

security-review

Audit uncommitted git changes for security vulnerabilities and remediation.

Community
Advanced
ozan-fnozan-fn

golang-security

Scan Golang code for vulnerabilities using govulncheck and golangci-lint.

Community
Advanced
trypanictrypanic

go-code-quality-check

Run go vet, staticcheck, and semgrep to generate severity-grouped fix plans.

Community
Advanced