Go Code Auditor

VerifiedSafe

Audits Go codebases for common anti-patterns and risks including unchecked errors, goroutine leaks, interface bloat, and package hygiene issues. It runs static analysis with go vet, scans for error discarding patterns, reviews goroutine safety, and checks interface design and package structure. Ideal for identifying code quality issues and potential runtime bugs before they occur.

Sby Skills Guide Bot
DevelopmentAdvanced
306/2/2026
Claude Code
#go#audit#static-analysis#error-handling#goroutine-leaks

Recommended for

Our review

Systematically scans a Go codebase for common anti-patterns such as unchecked errors, goroutine leaks, interface bloat, and package hygiene issues.

Strengths

  • Leverages go vet and static analysis tools for thorough coverage
  • Produces a structured report with file:line references
  • Catches subtle issues like discarded errors and unmanaged goroutines

Limitations

  • May generate false positives that require manual verification
  • Does not catch runtime errors or non-goroutine concurrency issues
  • Depends on the quality of grep patterns and AI inference
When to use it

Best used before code review, merge, or release to improve Go code quality.

When not to use it

Not suitable for quick checks or when the code is still in flux, as false positives may slow down development.

Security analysis

Safe
Quality score87/100

The skill instructs running 'go vet ./...' (a static analysis tool) and use of grep/read/glob to scan code for anti-patterns. None of these operations are destructive or exfiltrative, and the scope is limited to auditing the local codebase. No risky commands like curl, rm, or token exfiltration are instructed.

No concerns found

Examples

Full codebase audit
Audit the Go codebase in the current directory for common anti-patterns.
Targeted audit on specific packages
Run go-audit on the ./cmd and ./pkg directories, focusing on error handling and goroutine safety.
Audit with risk summary
Perform a complete Go audit on this project and provide a risk summary with actionable items.

name: go-audit description: Audit Go codebase for unchecked errors, goroutine leaks, interface bloat, and anti-patterns user-invocable: true allowed-tools: Read, Grep, Glob, Bash

You are a Go code auditor. Systematically scan the codebase for common Go anti-patterns and risks.

Steps

  1. Run static analysis: Execute go vet ./... and report any findings.

  2. Audit error handling:

    • Grep for patterns that discard errors: lines matching = .+\( where the error return is ignored
    • Grep for _ = patterns that might hide error discards
    • Grep for errors.New without %w wrapping in fmt.Errorf at call sites
    • Read flagged files and verify whether errors are properly checked and wrapped
  3. Audit goroutine patterns:

    • Grep for go func and go to find all goroutine launches
    • For each, verify: Is there a way to signal shutdown? Is context passed? Is there error propagation?
    • Check for sync.WaitGroup or errgroup.Group usage around goroutine launches
  4. Audit interface design:

    • Grep for type .+ interface to find all interfaces
    • For each interface, count methods. Flag interfaces with more than 3 methods.
    • Check if each interface has multiple implementations (Grep for the method signatures)
    • Flag interfaces defined in the same package as their only implementation
  5. Audit package hygiene:

    • Check for utils, common, helpers, misc package names
    • Look for circular imports by examining import statements across packages
    • Check for package-level var that introduces global mutable state
  6. Output the audit:

## Audit Report

### Error Handling
[Findings with file:line references]

### Goroutine Safety
[Findings with file:line references]

### Interface Design
[Findings with file:line references]

### Package Hygiene
[Findings with file:line references]

### Risk Summary
[High/Medium/Low risk areas with recommended action items]
Related skills