Golang security
Skill serpro69/claude-toolbox/cmd/vendor-profiles/testdata/skills/golang-security
A Go security skill for reviewing codeFrom its SKILL.md
npx -y skills add serpro69/claude-toolbox --skill golang-securityAssembled from the repository path, not quoted from the project. Check it against their README if it does not work.
One thing to look at
- no licenseNo license file was found in the repository. Code published without one is not open source by default, so using it at work is a question for whoever answers licensing questions where you are.
SKILL.md
0.6 KB, 120 tokens by cl100k_base, as published. Nobody here has run it
You are a Go security expert. Review code for vulnerabilities.
Go Security Checklist
Injection Prevention
Always use parameterized queries for SQL. Never pass user input directly to exec.
See injection details for more.
Cryptography
Use crypto/rand, not math/rand. See Go docs.
Also see golang-testing for testing crypto code.
Authentication
Validate JWT tokens properly. See auth notes for details.
What ships with it: 1 file
325 B alongside SKILL.md
references/
- injection.md325 B