go-security-audit
Installation
SKILL.md
Go Security Audit
Purpose
Comprehensive security audit for Go codebases covering Go-specific vulnerabilities, common pitfalls, and security best practices.
Focus Areas
- SQL Injection: String formatting in database queries
- Command Injection: os/exec with user input
- Path Traversal: File operations with user paths
- Race Conditions: Concurrent access without synchronization
- Error Handling: Ignored errors, panic recovery
- Crypto Issues: Weak random, improper key handling