技能 golang-cli
📦
golang-cli
v1.3.0 内容修订 r1 安全 ⚡ 包含脚本⚙️ 外部命令📁 文件系统访问🌐 网络访问
Build Reliable Go Command-Line Applications
Go command-line projects need consistent commands, configuration, output, shutdown, and testing patterns. This skill applies practical Cobra and Viper guidance with reusable Go examples.
支持: Codex Code(CC)
使用我的智能体安装
将此请求复制给你的智能体，其中包含权威 Skill 页面和清单。
智能体请求
Review the Skillstore skill "golang-cli" from https://skillstore.io/skills/samber-golang-cli.md and its manifest at https://skillstore.io/api/skills/samber-golang-cli/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.你的智能体仍应展示其计划，并按安全策略请求必要确认。
Agent 可读资源
当 AI Agent、爬虫或脚本需要干净上下文，而不是读取完整页面时，请使用这些链接。
测试它
正在使用“golang-cli”。 Design a deploy command with required environment and tag flags.
预期结果:
- A command layout with declarative argument validation.
- Required environment and tag flags with mutual-exclusion rules.
- Viper bindings and completion values for supported environments.
正在使用“golang-cli”。 Review a list command that mixes logs with pipeable output.
预期结果:
A review that moves records to stdout, diagnostics to stderr, and recommends selectable table, plain, and JSON formats.
正在使用“golang-cli”。 Add graceful shutdown to a server subcommand.
预期结果:
A design using signal-aware context cancellation, SIGINT and SIGTERM support, a shutdown timeout, and distinct handling for normal server closure.
安全审计
安全v1 • 2026/9/6 打开版本化报告
All 94 static findings are false positives caused by Go syntax, Markdown formatting, Cobra identifiers, completion documentation, and benign build examples. No malicious behavior, prompt injection, data exfiltration, unsafe command execution, or covert system access was found.
14
已扫描文件
1,129
分析行数
0
复核项
0
已忽略误报
风险因素
⚡ 包含脚本 (12)
assets/examples/args.go:3-7 assets/examples/cli_test.go:3-8 assets/examples/completion.go:3-7 assets/examples/config.go:3-11 assets/examples/exit_codes.go:3-8 assets/examples/flags.go:3-6 assets/examples/main.go:4-6 assets/examples/output.go:3-11 assets/examples/root.go:4-12 assets/examples/serve.go:4-9 assets/examples/signal.go:3-14 assets/examples/version.go:4-9
⚙️ 外部命令 (50)
assets/examples/completion.go:10 assets/examples/completion.go:14 assets/examples/completion.go:17 assets/examples/completion.go:26 assets/examples/completion.go:27 assets/examples/config.go:45 assets/examples/config.go:46 assets/examples/config.go:47 assets/examples/config.go:49 assets/examples/config.go:50 assets/examples/config.go:51 assets/examples/exit_codes.go:12 assets/examples/root.go:28 assets/examples/version.go:37 assets/examples/version.go:38 evals/evals.json:93 evals/evals.json:322 evals/evals.json:326 evals/evals.json:11 SKILL.md:3 SKILL.md:28 SKILL.md:36 SKILL.md:42 SKILL.md:43 SKILL.md:44 SKILL.md:45 SKILL.md:46 SKILL.md:47 SKILL.md:48 SKILL.md:49 SKILL.md:53 SKILL.md:55-66 SKILL.md:66-68 SKILL.md:68-72 SKILL.md:72-76 SKILL.md:76-77 SKILL.md:77-78 SKILL.md:78-83 SKILL.md:83 SKILL.md:91-92 SKILL.md:92-96 SKILL.md:96 SKILL.md:104 SKILL.md:112-113 SKILL.md:113-114 SKILL.md:114-115 SKILL.md:115-116 SKILL.md:116-117 SKILL.md:117-132 SKILL.md:132-139
📁 文件系统访问 (4)
🌐 网络访问 (1)
最新一次完成的静态与语义审计未检测到已确认的安全发现。这并不能证明该 Skill 没有副作用。
审计者: codex
分享与引用此报告
分享版本化评估报告、中性徽章、嵌入卡片和引用。Skillstore 只报告证据，不判断该 Skill 是否安全。
复制报告链接
https://skillstore.io/skills/samber-golang-cli/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportMarkdown 徽章
[](https://skillstore.io/skills/samber-golang-cli?utm_source=security_passport_badge)HTML 徽章
<a href="https://skillstore.io/skills/samber-golang-cli?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/samber-golang-cli/security.svg" alt="Skillstore security assessment" loading="lazy"></a>嵌入卡片
<iframe src="https://skillstore.io/embed/skills/samber-golang-cli.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>学术引用 (APA · BibTeX · CFF)
APA 引用
samber. (2026). golang-cli security audit report (audit version 1) [Author version 1.3.0]. Skillstore. https://skillstore.io/skills/samber-golang-cli/audits/1BibTeX 引用
@techreport{samber-samber-golang-cli-2026,
author = {samber},
title = {golang-cli security audit report (audit version 1)},
institution = {Skillstore},
year = {2026},
number = {1},
url = {https://skillstore.io/skills/samber-golang-cli/audits/1},
note = {Author version 1.3.0}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "golang-cli security audit report (audit version 1)"
version: "1.3.0"
type: report
authors:
- name: "samber"
date-released: "2026-09-06"
url: "https://skillstore.io/skills/samber-golang-cli/audits/1"
identifiers:
- type: other
value: "skillstore:samber-golang-cli:audit:1"
description: "Skillstore immutable audit report identifier"
Skillstore 评分
评分依据 证据置信度: 中 36
架构
100
可维护性
87
内容
65
社区
91
规范符合性
你能构建什么
Start a Go CLI
Create a maintainable Cobra command tree with flags, configuration, output rules, and a minimal entry point.
Extend an Existing Tool
Add subcommands, configuration sources, shell completion, or machine-readable output while preserving established project structure.
Review CLI Behavior
Check exit codes, signal handling, output streams, argument validation, and command tests for predictable automation.
试试这些提示
Create a Basic Command
Create a Cobra command named [command]. Add [arguments] and [flags]. Keep main minimal and return errors from command handlers.
Add Layered Configuration
Add Viper configuration to this CLI. Use prefix [prefix], optional file [path], flag bindings, defaults, and clear precedence.
Improve Automation Support
Review this command for scripting. Separate stdout and stderr, add table and JSON output, define exit codes, and add shell completion.
Harden a Long-Running CLI
Refactor this server command for production. Add context cancellation, SIGINT and SIGTERM handling, timed shutdown, typed errors, and command-level tests.
最佳实践
- Read the existing command tree before changing structure or shared behavior.
- Bind configurable flags explicitly and document the precedence of every configuration source.
- Test commands through Cobra interfaces so arguments, output, and errors remain observable.
避免
- Do not call process exit functions inside command handlers because deferred cleanup will not run.
- Do not write logs or diagnostics to stdout because they corrupt piped output.
- Do not require a configuration file when defaults and environment variables can provide valid settings.
常见问题
Which Go CLI libraries does this skill emphasize?
It uses Cobra for commands and flags, plus Viper for layered configuration.
Can it help with a standard library flag application?
Yes, but its detailed examples focus on Cobra and Viper. Simple tools may use the standard flag package.
Does it provide complete application code?
It provides focused reference examples. You must connect them to your modules, dependencies, and business logic.
How does it support shell scripts?
It separates data from diagnostics, recommends stable exit codes, and supports machine-readable output formats.
Does it cover shell completion?
Yes. It covers Cobra generators for Bash, Zsh, Fish, and PowerShell, plus custom flag and argument suggestions.
Can it review an existing CLI?
Yes. It checks command structure, configuration binding, output streams, exit behavior, signal handling, completion, and tests.