skills.rest
tamago0224
tamago0224COMMUNITY
Explore all skills by this author →
GitHub

golang-security

Identify security vulnerabilities in Go code using govulncheck and static analysis.

Updated Mar 8, 2026
Search Tags:#static analysis#code review#security#vulnerability#audit#go
One-click install
npx skills add https://github.com/tamago0224/kuroshio-mta --skill golang-security-tamago0224
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: golang-security
Source: https://github.com/tamago0224/kuroshio-mta/tree/main/.agents/skills/golang-security
Command: npx skills add https://github.com/tamago0224/kuroshio-mta --skill golang-security-tamago0224

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

Many Go projects lack comprehensive security reviews, leading to injection bugs, weak cryptography, and other vulnerabilities.

Core Features & Use Cases

  • Review mode: Examine pull requests for security flaws across changed files.
  • Audit mode: Perform full codebase scans covering injection, cryptography, web security, authentication, and concurrency issues.
  • Coding mode: Guide secure implementation and fix vulnerabilities while writing code.

Quick Start

Ask the golang-security skill to audit the Go project in the current directory for security vulnerabilities.

Frequently Asked Questions about golang-security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit my Go code for security vulnerabilities?▼

You can perform a full security audit on your Go project by scanning the codebase for injection, cryptography, web security, authentication, and concurrency issues using static analysis tools.

Can I check my Go pull requests for security flaws before merging?▼

Yes, you can use review mode to examine pull requests for security flaws. This mode specifically analyzes changed files across the Go project to identify potential vulnerabilities during code reviews.

Do I need the Go toolchain and govulncheck installed to scan my code?▼

Yes, performing security analysis requires the Go toolchain and govulncheck. Optional static analysis tools can also be configured to enhance the vulnerability detection process.

What's the best way to fix weak cryptography and injection bugs in Go?▼

The best way to fix weak cryptography and injection bugs is to use coding mode, which guides secure implementation and helps fix vulnerabilities directly while you are writing Go code.

Does this security analysis cover concurrency and authentication issues?▼

Yes, the security analysis covers concurrency and authentication issues. A full codebase audit examines web security, cryptography, injection flaws, and concurrency vulnerabilities across the project.

Related Skills

Explore More Software Engineering Skills→
JylhisJylhis
1

golang-dependency-management

Audit Go module dependencies with govulncheck and manage updates.

Community
Intermediate
Dhruvipatel0514Dhruvipatel0514
1

code-auditor

Identify and fix OWASP security vulnerabilities in source code repositories.

Community
Intermediate
TymorIbrahimTymorIbrahim

springboot-verification

Automates build, static analysis, tests, security scan, and code review for Spring Boot projects.

Community
Advanced
LerianStudioLerianStudio
205

ops-security-audit

Automate infrastructure security audits with phased scanning and compliance mapping.

Official
Advanced