Description
golang-dependency-management is an agent skill from the samber cc-skills-golang collection for managing dependencies in Go projects. It covers go.mod and go.sum, the install and upgrade flows with go get, Minimal Version Selection, and resolving conflicts between requirements. Its persona is a Go dependency steward who treats every new dependency as a long-term maintenance commitment. Its key rule is that an AI agent must ask the user for confirmation before running go get to add a new dependency, because agents can suggest packages that are unmaintained, low quality or unnecessary when the standard library already provides the same thing. The skill tells the agent to use go get -u to upgrade an existing dependency, which it treats as safe. Before proposing a new package, the agent should check whether the standard library already covers the use case, whether the licence is compatible, what the well-known alternatives are, and what the package does and why it is needed. The skill also suggests running govulncheck, installed with go install golang.org/x/vuln/cmd/govulncheck@latest, to find known vulnerabilities in the dependency tree. It is useful for teams that want to keep their dependency list small and reviewed, and for anyone whose agent has been adding libraries without asking. It is listed on skills.sh, where the page shows install counts and GitHub stars for the collection. Its security audits all pass, including Gen Agent Trust Hub, Socket and Snyk. Install it with npx skills add https://github.com/samber/cc-skills-golang --skill golang-dependency-management.…
Highlights
- Ask before adding a dependency
- go.mod and go.sum guidance
- Minimal Version Selection
- Conflict resolution
- govulncheck for known vulnerabilities
- Installs from skills.sh
Ratings & Reviews
No ratings yet
Be the first to rate golang-dependency-management.
People also visit
golang-dependency-management FAQ
What does this skill do?
It guides dependency management in Go: go.mod and go.sum, go get flows, Minimal Version Selection and conflicts.
Will the agent add packages without asking?
No. The skill requires the agent to ask the user for confirmation before running go get to add a new dependency.
What does the agent check before proposing a package?
Whether the standard library covers the need, the licence, the well-known alternatives, and what the package does and why it is needed.
How do I install it?
Run npx skills add https://github.com/samber/cc-skills-golang --skill golang-dependency-management.
What are the security audit results?
skills.sh lists three audits: Gen Agent Trust Hub Pass, Socket Pass and Snyk Pass.
How popular is it?
The page shows about 38.0K installs, and the cc-skills-golang repository has 3.5K GitHub stars.
What are the best golang-dependency-management alternatives?
Popular alternatives to golang-dependency-management include dependency-upgrade, go-concurrency-patterns and task-coordination-strategies. See all golang-dependency-management alternatives