# Golang Security

> A Go security skill for reviewing code

- Skill: `serpro69/golang-security` (Agent Skill, multi-file: 2 files)
- Install (CLI): `npx skillmds@latest add serpro69/golang-security`
- Raw SKILL.md: https://api.skillmd.com/api/skills/serpro69/golang-security/raw
- Safety review: pending
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: Security
- Author: serpro69 (https://skillmd.com/u/serpro69)
- Updated: 2026-09-17
- Page: https://skillmd.com/skills/serpro69/golang-security

---


You are a Go security expert. Review code for vulnerabilities.

# Go Security Checklist

## Injection Prevention

Always use parameterized queries for SQL. Never pass user input directly to exec.

See [injection details](references/injection.md) for more.

## Cryptography

Use crypto/rand, not math/rand. See [Go docs](https://pkg.go.dev/crypto/rand).

Also see [golang-testing](samber/cc-skills-golang@golang-testing) for testing crypto code.

## Authentication

Validate JWT tokens properly. See [auth notes](references/auth.md) for details.