vuln-guard

Name: vuln-guard
Availability: InStock
Author: oioio-space

Analyze Go code for security vulnerabilities using gosec and govulncheck.

Updated Jun 18, 2026

Search Tags:#code review #security #CI/CD #Go #vulnerability detection

Ready to run

npx skills add https://github.com/oioio-space/unpixel --skill vuln-guard

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: vuln-guard
Source: https://github.com/oioio-space/unpixel/tree/main/.claude/skills/vuln-guard
Command: npx skills add https://github.com/oioio-space/unpixel --skill vuln-guard

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill assists in identifying security vulnerabilities in Go code during the development process, preventing potential security issues from being committed to the repository.

Core Features & Use Cases

Pre-commit Security Checks: Uses gosec and govulncheck to scan code for common security vulnerabilities.
CI Security Scans: Integrates with CI pipelines to run syft and grype for dependency and CycloneDX SBOM analysis.
AI-Enhanced Review: Before committing, the skill provides a checklist for manual review of logic-level security issues.

Quick Start

Run unpixel vuln-guard to perform a security scan on your Go code.

Frequently Asked Questions about vuln-guard

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I detect security vulnerabilities in Go code before committing?▼

Detect security vulnerabilities in Go code by integrating automated tools like `gosec` and `govulncheck` into pre-commit hooks to scan for common issues before they reach the repository.

How can I generate a CycloneDX SBOM and scan Go dependencies in CI pipelines?▼

Generate a CycloneDX SBOM and scan Go dependencies by integrating `syft` and `grype` into your CI pipelines, enabling continuous dependency analysis and vulnerability detection during development.

Does AI-assisted manual review help catch logic-level security issues in Go?▼

AI-assisted manual review helps catch logic-level security issues in Go by providing a pre-commit checklist that complements automated scanning to identify vulnerabilities automated tools might miss.

What is the best way to automate continuous security scanning for Go code?▼

Automate continuous security scanning for Go code by combining `gosec` and `govulncheck` in pre-commit hooks with `syft` and `grype` in CI pipelines to catch issues early in the development cycle.

Do I need pre-commit hooks to use vulnerability detection tools with Go?▼

You need pre-commit hooks configured for your Go project to run vulnerability detection tools locally before committing, ensuring continuous scanning and preventing security issues from entering the repository.