Description
golang-security is an agent skill from the samber cc-skills-golang collection that brings security practice to Go code. It covers vulnerability prevention for injection, including SQL, command and cross-site scripting injection, as well as cryptography, path traversal, server-side request forgery, HTTP security headers and related areas. The skill is meant to apply security thinking while writing new code and when auditing existing code. It has three modes. Review mode checks a pull request, starting from the changed files and tracing call sites and data flows into code the diff touches. Audit mode runs up to five sub-agents in parallel, each covering one domain: injection, cryptography and secrets, web security and headers, authentication and authorisation, and concurrency safety and dependency vulnerabilities. Its findings are combined, scored with DREAD and reported by severity, and each fix is suggested as its own focused change. Coding mode applies the guidance while writing or fixing code. The skill expects the govulncheck tool, installed with go install golang.org/x/vuln/cmd/govulncheck@latest. It is listed on skills.sh, where the page shows install counts, GitHub stars and security audit results, all passing. Install it with npx skills add https://github.com/samber/cc-skills-golang --skill golang-security.…
Highlights
- Injection, cryptography and path traversal checks
- SSRF and HTTP security headers
- Review, audit and coding modes
- Five parallel audit sub-agents
- DREAD scoring by severity
- Installs from skills.sh
Ratings & Reviews
No ratings yet
Be the first to rate golang-security.
People also visit
golang-security FAQ
What does this skill cover?
Security for Go code, including injection, cryptography, path traversal, SSRF, HTTP security headers and authentication.
How does an audit work?
Up to five sub-agents cover injection, cryptography and secrets, web security, authentication and authorisation, and concurrency and dependencies. Findings are merged, scored with DREAD and ranked.
What tool do I need?
govulncheck, installed with go install golang.org/x/vuln/cmd/govulncheck@latest.
How do I install it?
Run npx skills add https://github.com/samber/cc-skills-golang --skill golang-security.
What are the security audit results?
skills.sh lists three audits: Gen Agent Trust Hub Pass, Socket Pass and Snyk Pass.
How popular is it?
The page shows about 40.3K installs, and the cc-skills-golang repository has 3.5K GitHub stars.
What are the best golang-security alternatives?
Popular alternatives to golang-security include cc-skill-security-review, security-review and golang-code-style. See all golang-security alternatives