go-vuln-info-disclosure

Community

Detect Go info disclosure vulnerabilities.

Authoryhy0
Version1.0.0
Installs0

System Documentation

What problem does it solve?

This Skill helps identify and prevent sensitive information from being accidentally leaked in Go applications, protecting credentials, secrets, and private data.

Core Features & Use Cases

  • Source Identification: Pinpoints where sensitive data originates (e.g., K8s Secrets, API keys).
  • Sink Analysis: Tracks data flow to potential leakage points like logs, API responses, and error messages.
  • Sanitization Check: Verifies if protective measures like json:"-" tags or log scrubbing are correctly implemented.
  • Use Case: Audit a Go web service to ensure that user API tokens are not inadvertently logged or returned in API responses, preventing credential theft.

Quick Start

Audit the Go codebase for potential information disclosure vulnerabilities.

Dependency Matrix

Required Modules

None required

Components

scriptsreferences

💻 Claude Code Installation

Recommended: Let Claude install automatically. Simply copy and paste the text below to Claude Code.

Please help me install this Skill:
Name: go-vuln-info-disclosure
Download link: https://github.com/yhy0/ghsa-skill-builder/archive/main.zip#go-vuln-info-disclosure

Please download this .zip file, extract it, and install it in the .claude/skills/ directory.
View Source Repository

Agent Skills Search Helper

Install a tiny helper to your Agent, search and equip skill from 223,000+ vetted skills library on demand.