安全扫描
OpenClaw
安全
high confidenceThe skill is an instruction-only auditor for Go DoS/resource-exhaustion patterns; its instructions, requirements, and included references are consistent with that purpose and do not ask for credentials, installs, or unrelated system access.
安全有层次,运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv0.1.02026/3/14
Initial release of go-vuln-dos skill for auditing Go code for denial of service risks and resource exhaustion vulnerabilities. - Provides detection guidance for Go-specific CWE-400/770/476 patterns: goroutine leaks, channel deadlocks, panic recover, uncontrolled memory/IO allocations. - Outlines typical sources (external inputs), critical sinks, and effective resource limiting/sanitization techniques. - Offers CLI grep patterns for common DoS vulnerability hotspots in Go code. - Includes detailed checklists for goroutine, memory, IO, panic recovery, and protocol-specific (HTTP/2, WebSocket, protobuf) resource exhaustion risks. - Documents false positive exclusion guidelines and references for real-world vulnerability case studies.
● 无害
安装命令
点击复制官方npx clawhub@latest install go-vuln-dos
🇨🇳 镜像加速npx clawhub@latest install go-vuln-dos --registry https://cn.longxiaskill.com
数据来源:ClawHub ↗ · 中文优化:龙虾技能库