Menu
Run gosec on a specific package and cross-reference findings against suppression list and TODO tracker
Installer avec Codex ou Claude Copiez ce prompt, collez-le dans Codex, Claude ou un autre assistant, puis laissez-le vérifier la page du skill et l'installer pour vous.
Run govulncheck locally and check for outdated Go dependencies
Generate table-driven Go tests for a package with httptest, context helpers, and config parsing patterns
Validate a config.yaml file against the Config schema and constraint rules from config/config.go
Build and smoke-test the Docker image locally to validate Dockerfile and binary startup
Draft conventional commit messages from staged changes for release-please
Basé sur la classification professionnelle SOC
| name | go-sec-audit |
| description | Run gosec on a specific package and cross-reference findings against suppression list and TODO tracker |
| user_invocable | true |
Run gosec directly on a specific package and report findings with remediation guidance.
/go-sec-audit <package> — e.g., /go-sec-audit oauth, /go-sec-audit proxy, /go-sec-audit cmd
/go-sec-audit — (no args) audits all packages
.golangci.yml to understand current exclusions.scratchpad/TODO.md to understand tracked suppressionsgolangci-lint run --enable-only gosec ./<package>/... 2>&1
Or for all packages:
golangci-lint run --enable-only gosec ./... 2>&1
For each finding, classify it:
.golangci.yml exclusions; needs triage.golangci.yml; verify the exclusion comment references a TODO item.scratchpad/TODO.md with a remediation planReport results:
Package: <package>
New issues: <count>
Suppressed: <count> (tracked in TODO.md)
New findings:
- G<code> at <file>:<line> — <description>
Remediation: <guidance>
Tracked suppressions:
- G<code> at <file> — TODO #<N>: <summary>
.golangci.yml exclusions with a new TODO item