ClawHub
Back to skill

Security audit

golang-troubleshooting

Security checks across malware telemetry and agentic risk

Overview

This skill is a coherent Go troubleshooting guide, with one caution that a production debugging example could log sensitive HTTP data if copied without redaction.

Install only if you want a Go debugging workflow that can inspect and modify Go code and run Go diagnostic tools. Be careful before applying the production HTTP dump example or environment-variable checks: redact credentials, cookies, tokens, request bodies, and PII, and keep pprof endpoints authenticated and isolated as the skill otherwise recommends.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (1)

Missing User Warnings

Medium
Confidence
93% confidence
Finding
The example uses httputil.DumpRequestOut(req, true) and DumpResponse(resp, true), which can record full headers and bodies. In production debugging guidance, this may capture credentials, session cookies, API keys, PII, or other secrets and send them to logs, creating a realistic confidentiality risk if copied into normal incident workflows without safeguards.

VirusTotal

65/65 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.