Golang Security
This is a comprehensive security auditing framework for Go that turns Claude into a security engineer who knows when to think deeply and when to parallelize. It covers the full range: SQL injection, command injection, XSS, crypto mistakes, path traversal, timing attacks, and race conditions. The standout feature is the three-mode workflow: review mode traces data flows beyond the diff, audit mode spawns five parallel agents to scan different vulnerability domains, and coding mode writes secure code from the start. It includes DREAD scoring, references the standard library solutions for each threat, and enforces a "research before reporting" rule so you trace data origins before flagging issues. Requires go and govulncheck installed. If you're doing security reviews or writing anything that touches user input, crypto, or file I/O, this is the skill.
- install copies · 90 days. Times the install command was copied on this site in the last 90 days, bots filtered.
- 8
- skills.sh installs
- 44.2K
- GitHub stars
- 3.8K
- last updated
- Aug 21, 2026
Install
$ npx -y skills add samber/cc-skills-golang --skill golang-security --agent claude-codeInstalls into .claude/skills of the current project.
Files
Persona: You are a senior Go security engineer. You apply security thinking both when auditing existing code and when writing new code — threats are easier to prevent than to fix.
Thinking mode: Reason as thoroughly as possible for security audits and vulnerability analysis — security bugs hide in subtle interactions and deep reasoning catches what surface-level review misses. On Claude Code, use ultrathink to trigger extended thinking explicitly.
Orchestration mode: Fan out the five vulnerability-domain sub-agents described in Audit mode as a fan-out-then-synthesize workflow for a full-codebase security audit. Parallelism covers more attack surface per pass; the synthesis step deduplicates findings and ranks them by severity. On Claude Code, use ultracode to opt into multi-agent orchestration explicitly.
Modes:
Sponsors
Agent CaffeineSponsoredClose your lid, come back to finished work
SnugSponsoredThe clipboard manager for the AI eraPromote your product hereReach 125k+ visitors monthly
WaxSponsoredBlock anything with supervision, without erasing your iPhonePromote your product hereReach 125k+ visitors monthly
knobsSponsoredSee your site on any phone, any day, in any languageDetails
- Repository
- github.com/samber/cc-skills-golang
- Categories
- Backend & APIs, Security, DevOps & CI/CD, Documentation, Go, Finance & Trading, Databases
- First seen
- Apr 16, 2026
More from samber/cc-skills-golang
All 47- Golang Design Patterns43.8K
- Golang Performance43.6K
- Golang Concurrency43.6K
- Golang Context42.7K
- Golang Naming42.5K
- Golang Database42.5K
- Golang Safety42.2K
- Golang Project Layout42.1K
- Golang Documentation42K
- Golang Modernize42K
- Golang Lint41.9K
- Golang Data Structures41.8K
- Golang Troubleshooting41.6K
- Golang Observability41.5K
- Golang Dependency Management41.4K
- Golang Structs Interfaces41.3K
- Golang Cli41.1K
- Golang Benchmark41K
- Golang Dependency Injection41K
- Golang Popular Libraries41K
- Golang Stretchr Testify40.9K
- Golang Continuous Integration40.9K
- Golang Grpc40.7K
- Golang Samber Lo40K
Recommended
More Backend & APIs
golang-concurrencysamber/cc-skills-golangGolang concurrency patterns. Use when writing or reviewing concurrent Go code involving goroutines, channels, select, locks, sync primitives, errgroup, singlefl43.6Kskills.sh installsgolang-documentationsamber/cc-skills-golangComprehensive documentation guide for Golang projects, covering godoc comments, README, CONTRIBUTING, CHANGELOG, Go Playground, Example tests, API docs, and llm42Kskills.sh installsgolang-observabilitysamber/cc-skills-golangGolang everyday observability — the always-on signals in production. Covers structured logging with slog, Prometheus metrics, OpenTelemetry distributed tracing,41.5Kskills.sh installs
convex-authzconvex/agent-skillsAudit and harden a Convex app's authorization: identity-from-arg impersonation, missing per-document ownership checks, public queries leaking data by a client-s41.3Kskills.sh installsconvex-reviewerconvex/agent-skillsConvex code reviewer — security, auth, validators, performance, and pattern checks for code in a convex/ directory. Use to review or audit Convex functions befo41.3Kskills.sh installsconvex-docsconvex/agent-skillsPull version-current Convex docs for the version this project uses — pin the installed version, fetch page-as-markdown or check node_modules types, freshness hi41.3Kskills.sh installs