golang-security

Security best practices and vulnerability prevention for Golang. Covers injection (SQL, command, XSS), cryptography, filesystem safety, network security, cookies, secrets management, memory safety, and logging. Apply when writing, reviewing, or auditing Go code for security, or when working on any risky code involving crypto, I/O, secrets management, user input handling, or authentication. Includes configuration of security tools.

1.35x

Quality

85%

Does it follow best practices?

Impact

95%

1.35x

Average score across 3 eval scenarios

Securityby

Passed

No known issues

Evaluation results

90%

User Management Search API

Safe dynamic SQL construction

Criteria

Without context

With context

Parameterized name filter

100%

Parameterized age filter

100%

IN clause numbered placeholders

100%

Role values passed as args

100%

ORDER BY uses allowlist

100%

No user column in SQL string

100%

Safe default sort column

100%

sqlx or pgx library used

Empty roles list handled

100%

Sort order direction validated

100%

95%

45%

Security Assessment for Payment API Service

DREAD scoring security report

Criteria

Without context

With context

DREAD factors per finding

100%

DREAD score formula

100%

Severity classification

60%

100%

Hardcoded password identified

100%

Hardcoded password severity

100%

SQL finding not dismissed

100%

SQL severity adjusted downward

33%

100%

PII in logs identified

100%

Missing server timeouts identified

100%

Inline comment recommended

100%

30%

HTTP Server Foundation for B2B Analytics Platform

HTTP security middleware setup

Criteria

Without context

With context

Content-Security-Policy header

100%

X-Frame-Options header

100%

X-Content-Type-Options header

100%

Strict-Transport-Security header

100%

Referrer-Policy header

100%

Permissions-Policy header

100%

ReadTimeout configured

100%

WriteTimeout configured

100%

IdleTimeout configured

100%

Per-client rate limiter

100%

Client map mutex protection

100%

golang.org/x/time/rate used

100%

Repository: samber/cc-skills-golang
Commit: e9761db

Evaluated: 1 day ago
Agent: Claude Code
Model: Claude Sonnet 4.6

Table of Contents

User Management Search API Security Assessment for Payment API Service HTTP Server Foundation for B2B Analytics Platform

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.