security-best-practices

Codify security best practices for Go-based platforms covering authentication and authorization.

1|Updated Jul 16, 2025
One-click install
npx skills add https://github.com/linskybing/platform-go --skill security-best-practices-linskybing
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security-best-practices
Source: https://github.com/linskybing/platform-go/tree/main/.github/skills/security-best-practices
Command: npx skills add https://github.com/linskybing/platform-go --skill security-best-practices-linskybing

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill consolidates security best practices for Go-based platforms, addressing common weaknesses in authentication, authorization, input validation, and secure coding patterns to reduce risk and compliance gaps.

Core Features & Use Cases

  • Security guidelines covering authentication, authorization, input validation, and secure data handling throughout the codebase.
  • Practical code examples for JWT, bcrypt-based password hashing, RBAC enforcement, safe input handling, and secure file operations.
  • Use Case: When building or auditing an API or microservice, apply these guidelines to ensure secure defaults and safe coding practices across services.

Quick Start

Review the security-best-practices SKILL.md and apply the provided patterns and examples to your Go services.

Frequently Asked Questions about security-best-practices

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I implement secure JWT authentication in Go microservices?

Implementing secure JWT authentication in Go microservices requires enforcing token expiration, validating signatures, and applying safe credential handling. This skill provides codified patterns for JWT handling with expiration to protect sensitive tokens across API development workflows.

What is the best way to enforce RBAC authorization in a Go-based platform?

Enforcing RBAC authorization in a Go-based platform involves applying structured role checks at the API routing layer. This skill codifies RBAC enforcement patterns to ensure access control and safe data handling across microservices.

How do I securely hash passwords using bcrypt when building Go APIs?

Securely hashing passwords using bcrypt when building Go APIs involves applying strong hashing algorithms with appropriate cost factors for credential storage. This skill provides practical code examples for bcrypt-based password hashing to protect user data.

Does this approach cover input validation and secure file handling for Go platforms?

This approach covers input validation and secure file handling for Go platforms. It consolidates security best practices for safe input handling, secure file operations, and security header enforcement to reduce risk and compliance gaps.

How do I manage secrets and enforce security headers in a Go microservice architecture?

Managing secrets and enforcing security headers in a Go microservice architecture requires structured guidelines for credential protection and HTTP response configuration. This skill codifies secrets management and security header enforcement patterns for robust platforms.