security-scan

Scan Go projects for security vulnerabilities with gosec and govulncheck.

23|1|Updated Feb 1, 2026
One-click install
npx skills add https://github.com/PeterBooker/veloria --skill security-scan-peterbooker
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security-scan
Source: https://github.com/PeterBooker/veloria/tree/main/.claude/skills/security-scan
Command: npx skills add https://github.com/PeterBooker/veloria --skill security-scan-peterbooker

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill helps identify and mitigate security vulnerabilities in your Go codebase and its dependencies, ensuring a more secure release process.

Core Features & Use Cases

  • Static Code Analysis: Uses gosec to find common security flaws directly in your source code.
  • Dependency Vulnerability Scanning: Employs govulncheck to detect known vulnerabilities in your project's dependencies.
  • Use Case: Before merging a pull request or preparing for a release, run this skill to proactively catch potential security issues.

Quick Start

Run a full security scan on the current project.

Frequently Asked Questions about security-scan

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan Go code for security vulnerabilities?

To scan Go code for security vulnerabilities, this Skill uses gosec to perform static analysis on your source code, identifying common security flaws directly within your project files.

What is the best way to check Go dependencies for known vulnerabilities?

The best way to check Go dependencies for vulnerabilities is using govulncheck, which this Skill employs to detect known vulnerabilities in your project's dependencies before a release.

Do I need gosec and govulncheck installed to run a dependency check?

Yes, you need gosec and govulncheck installed and configured for your project's package paths to run this security scan and dependency check successfully.

When should I run a security scan on my Go project?

You should run a security scan on your Go project before merging a pull request or preparing for a release, proactively catching potential security issues in your codebase and dependencies.

Does this static code analysis work with other programming languages?

No, this static code analysis is designed specifically for Go projects, utilizing Go-specific tools like gosec and govulncheck to scan code and dependencies.