go

GitHub Actions specialist focused on secure CI/CD workflows, action pinning to full commit SHAs, OIDC authentication, least-privilege permissions, and supply-chain security. Delegate workflow authoring and security hardening to this agent.

Delegate to this agent when authoring or reviewing Go MCP servers; it applies official github.com/modelcontextprotocol/go-sdk patterns, type-safe structs, context handling, and idiomatic Go conventions throughout.

Use when the user wants a security review of code, configurations, or architectural patterns. Identifies vulnerabilities with severity ratings and provides specific, implementable fixes.

Go naming conventions and idiomatic identifier choices. Use when writing new Go code, reviewing Go naming decisions, naming packages, types, functions, variables, interfaces, constants, or error values — or when the user asks about Go naming style, MixedCaps, getter/setter naming, receiver names, initialism casing (URL, ID, HTTP), or when they are struggling with what to name something in Go. Covers Effective Go, Google Go Style Guide, and community conventions.

Secure Go error handling and information leakage prevention. Use whenever writing Go code that handles errors in APIs, services, or any code that crosses trust boundaries — HTTP handlers, gRPC services, CLI tools with user-facing output. Also trigger when reviewing Go error handling, implementing structured logging, or when the user mentions security, error sanitization, or preventing data leaks through error messages — even if they don't explicitly say "security". Covers domain error types, trust boundary translation, log redaction with slog, and safe API responses.