Go Vuln Dos

• Risk level: Low
• Analyzed: May 1, 2026, 7:09 AM
• Findings: 1
• Version: 0.1.0

Overview

This is a coherent instruction-only Go security-auditing skill that suggests scoped code-search commands and does not request credentials, installation, persistence, or mutation authority.

This skill appears safe and purpose-aligned for reviewing Go code for DoS/resource-exhaustion issues. Install it if you want audit guidance, and ensure the agent runs the suggested searches only in projects you intend to inspect.

Findings (1)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

ASI02: Tool Misuse and Exploitation

Low

What this means

The agent may search through Go files in the working project to identify possible denial-of-service patterns.

Why it was flagged

The skill suggests local grep commands to search Go source code. This is read-only and purpose-aligned for auditing, but users should be aware it directs the agent to inspect repository files.

Skill content

grep -rn "go func\|go .*(" --include="*.go"

Recommendation

Use it in the intended code repository and review any reported matches manually before treating them as vulnerabilities.