security

Identify and remediate security weaknesses in Go services with structured checklists.

6|Updated Apr 5, 2026
One-click install
npx skills add https://github.com/vmkteam/claude-plugins --skill security-vmkteam
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security
Source: https://github.com/vmkteam/claude-plugins/tree/main/plugins/developer/skills/security
Command: npx skills add https://github.com/vmkteam/claude-plugins --skill security-vmkteam

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Go services often face defects in authentication, input validation, secrets handling, and dependency vulnerabilities. This skill provides a structured security checklist and real-world examples to reduce risk across code, reviews, and deployments.

Core Features & Use Cases

  • Automated scanning with tools like gosec, govulncheck, gitleaks, and trivy to identify common issues in code, dependencies, and containers.
  • Auth & input validation checks to prevent insecure authentication flows, authorization gaps, and unsafe user input handling.
  • Code review & incident readiness guidance that helps teams embed security validation into the development lifecycle and post-incident investigations.

Quick Start

Run the security checklist during code reviews to validate input handling, secrets usage, and dependency vulnerabilities.

Frequently Asked Questions about security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I check my Go service for security vulnerabilities during code review?

To check Go service security vulnerabilities during code review, use a structured checklist covering authentication, input validation, secrets handling, and dependency scanning. It provides actionable examples and repeatable validation steps to identify common security weaknesses.

What tools can I use to scan Go code and dependencies for security issues?

You can scan Go code and dependencies for security issues using gosec, govulncheck, gitleaks, and trivy. These tools identify common vulnerabilities in code, dependencies, and containers to reduce risk across deployments.

When do I need a security checklist for Go services?

You need a security checklist for Go services during code reviews, onboarding, and incident investigations. It helps identify and remediate security weaknesses across authentication, input validation, and dependency management.

How do I prevent insecure authentication and input validation flaws in Go?

To prevent insecure authentication and input validation flaws in Go, apply structured guidance and checks that validate input handling, authorization gaps, and unsafe user input. This embeds security validation into the development lifecycle.

Does this security checklist cover dependency and secrets management for Go?

Yes, the security checklist covers dependency and secrets management for Go. It includes automated scanning with tools like govulncheck and gitleaks to identify dependency vulnerabilities and secrets handling defects in code.