Golang Dependency Management
Go module hygiene: safe upgrades, govulncheck audits, and modern tool pinning.
Test report
- Verdict
- Tested · Works
- Score
- Tested
- Jul 14, 2026
- Environment
- Claude Code 2.x (agent harness)
- Upstream re-checked
- Aug 10, 2026 · 54aa5f1
For a tool-pinning + pre-release-audit task, the skill reached for the modern Go 1.24+ `go get -tool` directive and a govulncheck-gated `-u=patch` upgrade chain, correcting the outdated tools.go blank-import pattern and riskier blanket `-u` upgrade a cold-knowledge baseline defaulted to.
Scored on four weighted criteria — install, triggering, output vs. baseline, docs. How scoring works
- Installs cleanly 5/5
- Triggers reliably 5/5
- Output vs. baseline 8/10
- Docs & honesty 5/5
What Golang Dependency Management does
Covers go.mod/go.sum management, dependency upgrades (preferring the safer `-u=patch`), govulncheck vulnerability audits, conflict resolution via replace/exclude/retract, go.work workspaces, Dependabot/Renovate setup, and Go 1.24+ tool-pinning via `go get -tool`. Triggers when adding, removing, or upgrading Go dependencies or auditing for vulnerabilities; its built-in agent rule requires asking the user before adding any new dependency.
How to install Golang Dependency Management
git clone https://github.com/samber/cc-skills-golang
cd cc-skills-golang
mkdir -p ~/.claude/skills
cp -r skills/golang-dependency-management ~/.claude/skills/golang-dependency-management
Skills live in ~/.claude/skills/ (global) or .claude/skills/
(per-project). Restart Claude Code after installing.
Commands — how to trigger Golang Dependency Management
-
/golang-dependency-managementGo module hygiene: safe upgrades, govulncheck audits, and modern tool pinning.
It also activates on plain-language prompts like these:
-
Upgrade our go.mod dependencies safely without breaking anything -
Run a vulnerability audit on our Go modules before we ship -
Help me resolve this go.sum conflict after merging main
Frequently asked questions
- Is the Golang Dependency Management skill free?
- Yes. The skill itself is free from samber/cc-skills-golang. SkillProof publishes the install command and an independent test verdict at no cost.
- Does Golang Dependency Management work with Claude Code?
- We tested it with Claude Code 2.x (agent harness) on Jul 14, 2026. Verdict: Tested · Works. For a tool-pinning + pre-release-audit task, the skill reached for the modern Go 1.24+ `go get -tool` directive and a govulncheck-gated `-u=patch` upgrade chain, correcting the outdated tools.go blank-import pattern and riskier blanket `-u` upgrade a cold-knowledge baseline defaulted to.
- What is the Golang Dependency Management SkillProof Score?
- 9.2/10 — installs cleanly 5/5, triggers reliably 5/5, output vs. baseline 8/10, docs & honesty 5/5.
- How do I install Golang Dependency Management?
- Copy the install command from this page, run it in your terminal, and restart Claude Code. Skills live in ~/.claude/skills/ (global) or .claude/skills/ inside a project.
- Can I use Golang Dependency Management with Cursor, Copilot, Gemini CLI, Codex or other AI tools?
- The SKILL.md format is native to Claude (Claude Code, Desktop, claude.ai). The instructions inside adapt to other assistants: Cursor rules, GitHub Copilot instructions, Windsurf rules, Custom GPTs, AGENTS.md for OpenAI Codex, and GEMINI.md for Google Gemini CLI — our conversion guides cover each, and the free converter on the tools page does the wrapping for you.