go-vuln-crypto-tls

What problem does it solve?

This Skill helps audit Go code for common and critical vulnerabilities in cryptographic operations and TLS configurations, preventing man-in-the-middle attacks and ensuring secure communication.

Core Features & Use Cases

• TLS Configuration Auditing: Detects insecure TLS settings like InsecureSkipVerify: true.
• Cryptographic Validation: Identifies weak JWT/SAML signature validation and insecure HMAC comparisons.
• Use Case: When reviewing a Go application that handles sensitive user data over HTTPS, use this Skill to ensure that all TLS connections are properly validated and that cryptographic operations like JWT parsing are secure against common bypass techniques.

Quick Start

Audit the Go code in the current directory for insecure TLS configurations and cryptographic vulnerabilities.