Golang Dependency Management
Dependency management for Golang projects : go.mod and go.sum.
Works in any agent
2 static scans, 0 counted findings.
Recorded for this package revision; Edge checks the exact bundle again when your agent loads it.
What this skill does for you
Dependency management for Golang projects : go.mod and go.sum, `go get` install and upgrade flows, Minimal Version Selection, conflict resolution with replace/exclude/retract, `govulncheck` scanning of the module tree, outdated dependency and binary size auditing, vendoring, `tool` directives, and go.work workspaces. Use when adding, removing, or upgrading Go dependencies, deciding whether to take on a package, resolving version conflicts, or auditing what a module pulls in. Covers choosing and upgrading dependency versions, not the surrounding tooling: do NOT use for fixing an exploitable vulnerability in code (→ See `samber/cc-skills-golang@golang-security` skill) or for wiring Dependabot/Renovate update bots into CI workflows (→ See `samber/cc-skills-golang@golang-continuous-integration` skill).
Quoted from the skill description in the pinned sourceUse it with Edge
Set up Edge for me: read getedge.cc/SKILL.md and follow it. Then use Edge to load the golang-dependency-management skill from samber/cc-skills-golang.
Paste it into Claude, ChatGPT, Codex or Cursor.
Or read the skill source first.
Security evidence
| Scanner | Date | Result | Findings |
|---|---|---|---|
| Edge static checks | 2026-09-29 | Pass | 0 |
| Edge committed-secret checks | 2026-09-29 | Pass | 0 |
Static scans check the code, not how well the skill works.
Scanner scope, raw findings and mirrored provider records
Edge static checks (Edge-run): edge-static/1.0.0. Scope: Static patterns for remote execution, credentials with network sends, obfuscation, prompt overrides, hidden Unicode, binaries and persistence. Revision: 19a0626ae8565d27a7b7bdf59d8d99d94d7e284c. Raw findings: not supplied. Counted findings: .
Edge committed-secret checks (Edge-run): edge-secrets/1.0.0. Scope: Credentials committed in the skill's files (values never shown). Revision: 19a0626ae8565d27a7b7bdf59d8d99d94d7e284c. Raw findings: not supplied. Counted findings: .
Socket (skills.sh mirror): Version unavailable. Scope: Not supplied by the mirrored record. Revision: not supplied. Raw findings: not supplied. Counted findings: Not supplied.
Snyk (skills.sh mirror): Version unavailable. Scope: Not supplied by the mirrored record. Revision: not supplied. Raw findings: not supplied. Counted findings: Not supplied.
Source and licence
- Repository
- https://github.com/samber/cc-skills-golang
- Pinned skill file
- View source at revision
- Revision
- 19a0626ae8565d27a7b7bdf59d8d99d94d7e284c
- Package hash
- sha256:2133d5677f84b0d7674515653054a99be2ae29d5c31689a4d677324037dcc4a3
- Licence
- MIT
Files in the scanned package
| File | Size |
|---|---|
| SKILL.md | 10.3 KB |
| evals/evals.json | 11.2 KB |
| references/auditing.md | 3.4 KB |
| references/automated-updates.md | 1.8 KB |
| references/conflicts.md | 2.1 KB |
| references/versioning.md | 2.7 KB |
| references/visualization.md | 1.4 KB |
| references/workspaces.md | 1.2 KB |
Try Golang Dependency Management in your agent.
Dependency management for Golang projects : go.mod and go.sum.