security-review

Review Go code for TLS, network, and Go-specific vulnerabilities.

11|1|Updated May 15, 2026
One-click install
npx skills add https://github.com/usk6666/yorishiro-proxy --skill security-review-usk6666
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security-review
Source: https://github.com/usk6666/yorishiro-proxy/tree/main/.claude/skills/security-review
Command: npx skills add https://github.com/usk6666/yorishiro-proxy --skill security-review-usk6666

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill automates the process of conducting thorough security reviews for Go projects, focusing on TLS, network, and Go-specific vulnerabilities.

Core Features & Use Cases

  • Comprehensive Checklist: Covers TLS/certificate security, network configurations, Go-specific pitfalls (race conditions, goroutine leaks), and MCP/API security.
  • Targeted Reviews: Allows for full-project reviews or focused reviews on specific packages.
  • Use Case: Before deploying a new microservice written in Go, use this Skill to perform a security audit to identify and mitigate potential vulnerabilities in its TLS implementation and network handling.

Quick Start

Initiate a full security review of the yorishiro-proxy codebase.

Frequently Asked Questions about security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I perform a security review on my Go codebase to check for TLS and network vulnerabilities?

A security review for Go code analyzes your project against a comprehensive checklist to identify TLS vulnerabilities, network configuration issues, and Go-specific pitfalls, reporting findings categorized by severity.

What common Go-specific vulnerabilities should I check for during a security audit?

Common Go-specific vulnerabilities include race conditions and goroutine leaks. A security review checks for these along with resource limits and input validation issues, reporting them categorized by severity.

Can I run a targeted security review on specific Go packages instead of the full project?

Yes, targeted security reviews allow you to focus the vulnerability analysis on specific Go packages. This enables checking TLS implementation and network handling in particular components instead of the full project.

When do I need to audit my Go code for TLS configuration and certificate validity issues?

You need to audit your Go code for TLS configuration and certificate validity before deploying new microservices. This ensures private key protection, proper TLS versioning, and secure cipher suites are implemented.

What is the best way to identify network timeout and resource limit issues in a Go microservice?

The best way to identify network timeout and resource limit issues is using an automated security review. It analyzes Go code against a checklist, categorizing discovered vulnerabilities by severity for mitigation.