Skills darkit-gin

📦

darkit-gin

Name: darkit-gin
Author: DarkiT

Content revision r1 Safe 🌐 Network access⚡ Contains scripts⚙️ External commands📁 Filesystem access🔑 Env variables

Build Darkit Gin APIs Faster

Building Gin APIs often requires repeated setup for auth, caching, documentation, and real-time events. This skill guides Claude, Codex, and Claude Code through Darkit Gin patterns with focused examples.

Supports: Claude Codex Code(CC)

🥉 78 Bronze

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request

Review the Skillstore skill "darkit-gin" from https://skillstore.io/skills/darkit-darkit-gin.md and its manifest at https://skillstore.io/api/skills/darkit-darkit-gin/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Your Agent should still show its plan and request any confirmation required by the security policy.

Agent-readable resources

Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.

Markdown detail GET /skills/darkit-darkit-gin.md Signed manifest GET /api/skills/darkit-darkit-gin/manifest Signed lockfile GET /api/skills/darkit-darkit-gin/lockfile

Test it

Using "darkit-gin". Design a user service with JWT, caching, and Swagger documentation.

Expected outcome:

The response provides a route map, authentication flow, cache strategy, documentation plan, and production checklist.

Using "darkit-gin". Add SSE notifications to an existing account API.

Expected outcome:

The response outlines event names, hub usage, client subscription rules, reconnect behavior, and cleanup responsibilities.

Using "darkit-gin". Review a Darkit Gin service before deployment.

Expected outcome:

The response flags missing secret handling, unsafe CORS settings, weak rate limits, cache invalidation gaps, and documentation omissions.

Security Audit

Safe

v10 • 7/9/2026 Open versioned report

The skill is documentation-only, and most static findings are safe examples, local URLs, Go imports, Go struct tags, or visible test commands. I confirmed one high-severity documentation risk: the Docker Compose example hardcodes a PostgreSQL password in DATABASE_URL. No prompt-injection, malware intent, or unauthorized exfiltration language was found.

Files scanned

5,229

Lines analyzed

Review items

False positives ignored

Capability review items (1)

These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.

High

resources/complete-examples.md:760

Database connection strings

- DATABASE_URL=postgres://postgres:password@db:5432/userdb?sslmode=disable

The Docker Compose example hardcodes postgres:password in DATABASE_URL and disables SSL. Even as documentation, this can lead users to reuse weak database credentials.

Risk Factors

🌐 Network access (42)

⚡ Contains scripts (17)

resources/cache-system.md:441-445 resources/complete-examples.md:73-76 resources/complete-examples.md:217-222 resources/complete-examples.md:354-360 resources/complete-examples.md:538-556 resources/complete-examples.md:809-812 resources/complete-examples.md:842-849 resources/jwt-auth.md:218-222 resources/openapi-docs.md:187-189 resources/quick-start.md:59-64 resources/quick-start.md:113-116 resources/quick-start.md:261-264 resources/quick-start.md:362-367 resources/sse-realtime.md:58-62 resources/sse-realtime.md:177-180 resources/sse-realtime.md:453-457 SKILL.md:240-244

⚙️ External commands (50)

📁 Filesystem access (1)

resources/complete-examples.md:873

🔑 Env variables (2)

resources/complete-examples.md:565 resources/complete-examples.md:760

Audited by: codex View Audit History →

Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report

Copy report link

https://skillstore.io/skills/darkit-darkit-gin/audits/10?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/darkit-darkit-gin/security.svg)](https://skillstore.io/skills/darkit-darkit-gin?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/darkit-darkit-gin?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/darkit-darkit-gin/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/darkit-darkit-gin.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Academic citations (APA · BibTeX · CFF)

APA citation

DarkiT. (2026). darkit-gin security audit report (audit version 10) [Author version unspecified]. Skillstore. https://skillstore.io/skills/darkit-darkit-gin/audits/10

BibTeX citation

@techreport{darkit-darkit-darkit-gin-2026,
  author = {DarkiT},
  title = {darkit-gin security audit report (audit version 10)},
  institution = {Skillstore},
  year = {2026},
  number = {10},
  url = {https://skillstore.io/skills/darkit-darkit-gin/audits/10},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "darkit-gin security audit report (audit version 10)"
version: "unspecified"
type: report
authors:
  - name: "DarkiT"
date-released: "2026-07-09"
url: "https://skillstore.io/skills/darkit-darkit-gin/audits/10"
identifiers:
  - type: other
    value: "skillstore:darkit-darkit-gin:audit:10"
    description: "Skillstore immutable audit report identifier"

Skillstore Score

Why this score Evidence Confidence: High

Architecture

Maintainability

Content

Community

Spec Compliance

What You Can Build

Start a New API

Create a Darkit Gin project outline with router options, health checks, REST routes, and response conventions.

Add Auth and Middleware

Plan JWT login, protected route groups, CORS, rate limits, request IDs, and safe error responses.

Document and Operate Services

Prepare OpenAPI annotations, Swagger routes, cache settings, SSE events, and production review checklists.

Try These Prompts

Create a Starter API

Use the darkit-gin skill to design a minimal user API. Include router options, health checks, one resource route, and setup steps.

Add JWT Protection

Use the darkit-gin skill to add JWT login and protected routes. Include token lifetime, role checks, logout, and safe secret handling.

Plan Realtime Updates

Use the darkit-gin skill to design SSE notifications for account events. Include client subscriptions, broadcast rules, reconnect behavior, and cleanup.

Review Production Readiness

Use the darkit-gin skill to review a production API design. Check CORS, rate limits, cache invalidation, OpenAPI coverage, database settings, and observability.

Best Practices

Load JWT secrets, database credentials, and deployment URLs from managed configuration.
Use Darkit Gin response helpers, validation tags, and middleware consistently across all handlers.
Review CORS, TLS, rate limits, cache invalidation, and OpenAPI annotations before release.

Avoid

Do not copy placeholder secrets, passwords, or local URLs into production configuration.
Do not expose protected routes without authentication middleware and role checks.
Do not return raw database errors or sensitive fields in API responses.