security-scanning

Name: security-scanning
Availability: InStock
Author: MolcajeteAI

Scan Go projects with gosec and govulncheck for security vulnerabilities.

2|1|Updated Nov 13, 2025

Search Tags:#security #vulnerability #go #scanning #gosec #govulncheck

Ready to run

npx skills add https://github.com/MolcajeteAI/plugin --skill security-scanning-molcajeteai

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: security-scanning
Source: https://github.com/MolcajeteAI/plugin/tree/main/deprecated/tech-stacks/go/skills/security-scanning
Command: npx skills add https://github.com/MolcajeteAI/plugin --skill security-scanning-molcajeteai

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill helps identify potential security vulnerabilities and weaknesses in Go codebases, ensuring a more secure development process.

Core Features & Use Cases

Static Analysis: Utilizes gosec to detect common security issues like hardcoded credentials, SQL injection, and weak cryptography.
Vulnerability Scanning: Employs govulncheck to find known vulnerabilities in project dependencies.
Use Case: Before deploying a new Go application, run this Skill to proactively identify and fix security risks, preventing potential breaches.

Quick Start

Use the security-scanning skill to analyze the current Go project for vulnerabilities.

Frequently Asked Questions about security-scanning

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I scan Go code for security vulnerabilities?▼

To scan Go code for security vulnerabilities, this Skill runs static analysis with gosec and dependency detection with govulncheck. It identifies hardcoded credentials, SQL injection, and weak cryptography to mitigate risks before deployment.

What is the best way to find known vulnerabilities in Go project dependencies?▼

Finding known vulnerabilities in Go project dependencies is achieved using govulncheck. This Skill employs govulncheck to detect vulnerable modules and mitigate security risks in your Go applications.

Can I use gosec for static analysis in a CI/CD pipeline?▼

Yes, gosec for static analysis works in a CI/CD pipeline. This Skill is applicable to development and CI/CD pipelines requiring code security audits to proactively identify and fix security risks.

Does this security scanning detect hardcoded credentials in Go applications?▼

Yes, this security scanning detects hardcoded credentials in Go applications. It utilizes gosec to perform static analysis and identify common security issues like hardcoded credentials, SQL injection, and weak cryptography.

When do I need to perform a dependency vulnerability check on my Go project?▼

A dependency vulnerability check on your Go project is needed before deploying a new application. Running this Skill proactively identifies and fixes security risks, preventing potential breaches.