golang-security
Security best practices and vulnerability prevention for Golang — injection (SQL, command, XSS), cryptography, path traversal, SSRF and HTTP security headers, cookies, secrets management, memory safety, PII in logs, STRIDE/DREAD threat modeling, plus gosec SAST, race detection, and fuzz testing. Apply when writing, reviewing, or auditing Go code for security, or when touching crypto, file or network I/O, secrets,…
- installs 8w
- 5,166
- 30-day movement
- starts with the next reading
- Related entries
- 1
- Connections
- 0
A SKILL.md agent skill giving Go security best practices and vulnerability prevention: injection (SQL, command, XSS), cryptography, path traversal, SSRF, HTTP headers, cookies, secrets, memory safety, PII in logs, plus STRIDE/DREAD threat modeling, gosec SAST, race detection, and fuzz testing. It bundles reference documents by domain (architecture, checklist, injection, crypto, filesystem, network, secrets, logging, and more) that the agent loads alongside its workflow guidance.
You want a coding agent to apply consistent, Go-specific security knowledge when writing, reviewing, or auditing code that touches crypto, file/network I/O, secrets, user input, or authentication.
Use it to
- Audit Go code for injection, SSRF, and path traversal vulnerabilities
- Model threats with STRIDE/DREAD at trust boundaries
- Review crypto, cookie, and secrets handling against a checklist
- Run gosec SAST, race detection, and fuzz testing
- Prevent PII leakage in logs
For Go developers using Claude Code-style agents for security-sensitive work
- Host repository
- samber/cc-skills-golang
- Version
- 1.2.2
- Installs, lifetime
- 40k
- Installs, 8 weeks
- 5,166
- Compatible with
- Designed for Claude Code, Codex or similar harness, and for projects using Golang.
- Licence
- MIT
- Invocable by
- user
- Host stars
- 3,273
- Host language
- Go