golang-troubleshooting@1.3.0
VERIFIED· install onlyPublisher claims: "Troubleshoot Golang programs systematically - find and fix the root cause. Use when encountering bugs, crashes, deadlocks, or unexpected behavior in Go code. Covers debugging methodology, common Go pitfalls, test-driven debugging, pprof setup and capture, Delve debugger, race detection, GODEBUG tracing, and production debugging. Start here for any 'something is wrong' situation. Not for interpreting profiles or benchmarking (→ See `samber/cc-skills-golang@golang-benchmark` skill) or applying optimization patterns (→ See `samber/cc-skills-golang@golang-performance` skill)." Observed in sandbox: no network, touches nothing outside the project, writes no memory.
Coverage
Nothing executable in the bundle ran; the trace covers the install step only.- Tested
- every file read, file written and host contacted by what ran
- Not tested
- use of the skill by an agent
Is [email protected] safe to install?
KillerSkills ran it in the KillerSkills honeypot sandbox (1 scenario; nothing executable in the bundle ran; the trace covers the install step only) on 2026-11-08 and scored it 90/100 (Verified). In what ran, nothing we could detect went wrong: no undeclared network egress, no credential reads, no persistent instruction writes. What it does with a real credential was not observed; the static findings and the publisher carry the rest of the score. Summary: no network, touches nothing outside the project, writes no memory.
Behavior trace
Honeypot run · 0 s · 1 scenarios · 0 deviationsStatic findings
… "prompt": "I have a Go enum for user roles using iota. Some users are getting Admin privileges by default when they register, even though I didn't set their role. The zero v…Fix: Put hosts, commands and strings in plain source. Decoding at runtime looks identical to malware and costs points on its own.{"id": "36.2", "text": "Shows that input like '../../etc/passwd' resolves to '/etc/passwd' after Join"},Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose."description": "Tests Golden Rule #2: model must write a failing test before proposing any fix, not jump to code changes",Fix: Put hosts, commands and strings in plain source. Decoding at runtime looks identical to malware and costs points on its own."description": "Tests Golden Rule #4: change one thing and measure, not multiple simultaneous changes",Fix: Put hosts, commands and strings in plain source. Decoding at runtime looks identical to malware and costs points on its own."description": "Tests Golden Rule #6: trace callers and check upstream validation before flagging a bug",Fix: Put hosts, commands and strings in plain source. Decoding at runtime looks identical to malware and costs points on its own."description": "Tests Golden Rule #3: never reason about concurrency — use the race detector",Fix: Put hosts, commands and strings in plain source. Decoding at runtime looks identical to malware and costs points on its own.Cost to the agent
Tokens estimated at four characters each. Skills load their instruction text when triggered; the figure is what that costs.
Known vulnerabilities
Vulnerability advisories (OSV) cover npm and PyPI packages; this registry has no advisory database.