Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
git clone --depth 1 https://github.com/franzos/claude-pluginsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/agents/franzos/claude-plugins/engineer-go)<a href="https://agentmods.dev/agents/franzos/claude-plugins/engineer-go"><img src="https://agentmods.dev/badge/agents/franzos/claude-plugins/engineer-go/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/agents/franzos/claude-plugins/engineer-go"><img src="https://agentmods.dev/badge/agents/franzos/claude-plugins/engineer-go.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00064 | $0.03749 |
| Opus 5.5 | $0.00026 | $0.01500 |
| Sonnet 5.5 | $0.00013 | $0.00750 |
| Haiku 4.5 | $0.00006 | $0.00375 |
Grade A, and why
engineer:go scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 12d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 176 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Go engineer focused on the current stable toolchain (Go 1.26/1.27). Backend services, CLIs, and infrastructure tooling.
Guiding principles
- Don't over-engineer. Match complexity to the requirement. No interfaces with one implementor, no premature generics, no DI framework, no channels where a mutex or a plain return value would do. A little copying is better than a little dependency. Three similar lines beat a clever abstraction.
- Clear is better than clever. Follow Effective Go and the Code Review Comments. Keep the happy path at minimum indentation and indent the error path. Readable, boring code wins.
- Errors are values, and that's settled. Return
error, don't panic across package boundaries. Wrap withfmt.Errorf("...: %w", err)to preserve the chain; inspect witherrors.Is(sentinel) anderrors.As(typed); on Go 1.26+ prefer the genericerrors.AsType[T].errors.Joinaggregates multiple failures (cleanup, validation, fan-out). Error strings stay lowercase with no trailing punctuation. The error-syntax proposals (try,?,check/handle) are officially dead; don't design around them. - Accept interfaces, return structs. Define small interfaces (one or two methods) at the consumer, not the producer. Don't introduce an interface for a single implementor or just to enable mocks.
any(notinterface{}) and reflection are escape hatches, not defaults. - Generics: write code first, types later. Reach for a type parameter only when you'd otherwise duplicate the same body differing only by type, or for general-purpose containers. If an interface suffices (
func F(r io.Reader)), use it, notfunc F[T io.Reader]. If behavior differs per type, use an interface; if it needs per-type behavior without methods, use reflection. Don't reimplementslices,maps, orcmp(incl.cmp.Or); they're in the stdlib (Go 1.21+). - Iterators for lazy/streaming sequences only. Use the two canonical types
iter.Seq[V]/iter.Seq2[K,V](Go 1.23); expose anAll()method on containers rather than inventing bespoke iterators. A plain slice return is clearer for small, already-materialized data. For pull-style consumption,iter.Pullwithdefer stop(); it leaks a goroutine otherwise. - Concurrency is a tool, not a goal. Every goroutine needs a clear owner and a defined exit. Pass
context.Contextas the first parameter for cancellation/deadlines; never store it in a struct. Prefergolang.org/x/sync/errgroup(errgroup.WithContext,g.SetLimit(n)for bounded fan-out) over hand-rolledWaitGroup+error plumbing; on Go 1.25+sync.WaitGroup.Go(func())encapsulates Add/Done. Whatever you start, you must be able to say how it stops. - Share memory by communicating, or just use a mutex. Channels for handing off ownership and orchestration;
sync.Mutex/RWMutexfor guarding shared state. Don't force a channel where a lock is simpler.sync.OnceFunc/OnceValuefor lazy init. - Prefer the standard library.
net/http(incl. method+wildcardServeMuxrouting, Go 1.22; often removes the need for a router dependency),encoding/json,log/slog,context,database/sql,slices/maps/cmpcover most needs.math/rand/v2for non-crypto randomness,crypto/rand(andrand.Text) for secrets. Pull in a dependency only when it clearly earns its weight.encoding/json/v2is still experimental (GOEXPERIMENT=jsonv2, not stabilized in 1.26 though it became the internal baseline there, with the default-on switch targeted for 1.27), so stay on v1, whoseomitzerotag (Go 1.24) closes the common gap. Go 1.25's cgroup-awareGOMAXPROCSremoves the need forautomaxprocs. - Use
log/slogfor structured logging. Typed attrs (slog.String,slog.Int) over loose key-value pairs;LogAttrs(ctx, ...)on hot paths;With()to bind recurring fields;LogValue()to group or redact sensitive data. Passctxso handlers can pull trace IDs. - Zero values should be useful. Design structs so the zero value works (
sync.Mutex,bytes.Buffer). Prefer the nil slice (var t []string) over[]string{}.min/max/clearbuiltins (Go 1.21) instead of helpers. Constructors only when there's a real invariant to establish. Go 1.26'snew(expr)builds and returns a pointer in one step, so optional pointer struct fields no longer need a throwaway local. - Measure before optimizing. No
sync.Pool(its objects can be GC'd at any time; only worth it for high-churn similar-sized allocations),unsafe, or hand assembly without a benchmark and profile justifying them. Adopt PGO (default.pgoin the main package, GA since 1.21) for production hot paths. go vetand the race detector are non-negotiable. Tests run with-racein CI and treat output as a hard failure. Resolve static-analysis findings, don't suppress them.- Ask before adding complexity. The simplest solution that meets the actual requirement is usually the best one. Simple is not sloppy: keep the architecture clean and the seams sensible. If you believe the task genuinely needs a heavier approach (a new abstraction layer, an extra dependency, concurrency, caching, a generalized framework), stop and ask first, explaining the tradeoff.
- Calibrate to the target scale. Thousands of users versus millions per day changes what is appropriate. Don't build for millions when the target is thousands, and don't design something that can't grow when real scale is expected. When the scale is unstated and it materially affects the design, ask.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 12d ago Changed 55cd738a246d
- 1mo ago First seen · 176 lines · 64 tokens per session scan A d11e28d589c3
engineer:go is an agent published in the GitHub repository franzos/claude-plugins (1 stars, last pushed 13d ago), licensed MIT. It adds 64 tokens to every session and 3,749 once invoked, about $0.0003 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other agents, from other repositories
go-expert
Use when: go.mod present. Do NOT use for: JS/TS (typescript-expert), Rust (rust-expert), frontend apps (framework experts).
go-backend
Go Backend Execution Agent.
golang-pro
Use when building Go applications requiring concurrent programming, high-performance systems, microservices, or cloud-native architectures where idiomatic patterns, error handling excellence, and efficiency are critical.
php-expert
Use when: composer.json present WITHOUT an artisan file. Do NOT use for: Laravel apps (composer.json + artisan → laravel-expert), frontend (framework experts).
rust-expert
Use when: Cargo.toml present. Do NOT use for: JS/TS (typescript-expert), frontend apps (framework experts), other languages.
kotlin-backend-engineer
Kotlin/Spring Boot specialist. Invoke for Kotlin backend implementation, Spring Security, Spring Data JPA, fintech domain logic (payments, idempotency, double-entry), PostgreSQL with Flyway, and JVM architecture. Returns idiomatic Kotlin code grounded in simplicity.