skills.rest
MolcajeteAI
MolcajeteAIOFFICIAL
Explore all skills by this author →
GitHub

security-scanning

Scan Go projects with gosec and govulncheck for security vulnerabilities.

2|1|Updated Nov 13, 2025
Search Tags:#security#vulnerability#go#scanning#gosec#govulncheck
One-click install
npx skills add https://github.com/MolcajeteAI/plugin --skill security-scanning-molcajeteai
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-scanning
Source: https://github.com/MolcajeteAI/plugin/tree/main/deprecated/tech-stacks/go/skills/security-scanning
Command: npx skills add https://github.com/MolcajeteAI/plugin --skill security-scanning-molcajeteai

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill helps identify potential security vulnerabilities and weaknesses in Go codebases, ensuring a more secure development process.

Core Features & Use Cases

  • Static Analysis: Utilizes gosec to detect common security issues like hardcoded credentials, SQL injection, and weak cryptography.
  • Vulnerability Scanning: Employs govulncheck to find known vulnerabilities in project dependencies.
  • Use Case: Before deploying a new Go application, run this Skill to proactively identify and fix security risks, preventing potential breaches.

Quick Start

Use the security-scanning skill to analyze the current Go project for vulnerabilities.

Frequently Asked Questions about security-scanning

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan Go code for security vulnerabilities?▼

To scan Go code for security vulnerabilities, this Skill runs static analysis with gosec and dependency detection with govulncheck. It identifies hardcoded credentials, SQL injection, and weak cryptography to mitigate risks before deployment.

What is the best way to find known vulnerabilities in Go project dependencies?▼

Finding known vulnerabilities in Go project dependencies is achieved using govulncheck. This Skill employs govulncheck to detect vulnerable modules and mitigate security risks in your Go applications.

Can I use gosec for static analysis in a CI/CD pipeline?▼

Yes, gosec for static analysis works in a CI/CD pipeline. This Skill is applicable to development and CI/CD pipelines requiring code security audits to proactively identify and fix security risks.

Does this security scanning detect hardcoded credentials in Go applications?▼

Yes, this security scanning detects hardcoded credentials in Go applications. It utilizes gosec to perform static analysis and identify common security issues like hardcoded credentials, SQL injection, and weak cryptography.

When do I need to perform a dependency vulnerability check on my Go project?▼

A dependency vulnerability check on your Go project is needed before deploying a new application. Running this Skill proactively identifies and fixes security risks, preventing potential breaches.

Related Skills

Explore More Software Engineering Skills→
PeterBookerPeterBooker
23

security-scan

Scan Go projects for security vulnerabilities with gosec and govulncheck.

Community
Intermediate
baekenoughbaekenough
13

omcustom:npm-audit

Audit npm dependencies for security vulnerabilities and outdated packages.

Community
Intermediate
xiaoshuangLixiaoshuangLi
1

ci-cd

Automate GitHub Actions workflow design with templates for build, test, and deploy.

Community
Intermediate
kivo360kivo360
1

moai-domain-security

Mitigate security vulnerabilities in CI/CD pipelines using OWASP Top 10 and SAST/DAST workflows.

Community
Advanced