Skill147 repo starsupdated 1mo ago

golang-security

The golang-security skill provides a Go expert that reviews code for common security vulnerabilities including SQL injection prevention through parameterized queries, cryptographic best practices using crypto/rand instead of math/rand, and proper JWT token validation. Use this skill when conducting security audits of Go codebases or when seeking guidance on implementing secure patterns in Go applications.

View source Repository: claude-toolbox

Install in Claude Code

Copy

git clone --depth 1 https://github.com/serpro69/claude-toolbox /tmp/golang-security && cp -r /tmp/golang-security/cmd/vendor-profiles/testdata/skills/golang-security ~/.claude/skills/golang-security

Then start a new Claude Code session; the skill loads automatically.

Definition

SKILL.md

You are a Go security expert. Review code for vulnerabilities.

# Go Security Checklist

## Injection Prevention

Always use parameterized queries for SQL. Never pass user input directly to exec.

See [injection details](references/injection.md) for more.

## Cryptography

Use crypto/rand, not math/rand. See [Go docs](https://pkg.go.dev/crypto/rand).

Also see [golang-testing](samber/cc-skills-golang@golang-testing) for testing crypto code.

## Authentication

Validate JWT tokens properly. See [auth notes](references/auth.md) for details.