stackrox-mcp: Skill for Claude Code

.claude/skills/use-modern-go/SKILL.md

use-modern-go is a skill for Claude Code from stackrox/stackrox-mcp. It costs 25 tokens per session (2,408 once invoked), scanned A, a copy of use-modern-go, Apache-2.0.

A set of modern Go coding guidelines selected for the project's Go version.

In plain words
What is it for?
It guides syntax, standard-library choices, built-ins, and other implementation patterns when writing or reviewing Go code.
Why use it?
It keeps new Go code aligned with the language version in use and avoids outdated patterns or features from newer versions.

Skill for Claude Code

Written for Claude Code: dynamic context !`command`. Also seen: names the AskUserQuestion tool.

This is stackrox/stackrox-mcp's own configuration. It tells Claude Code how to work on stackrox-mcp itself, so it is not a mod to install elsewhere. Copy it as a starting point and replace the rules that are about this project. Everything stackrox-mcp configures →

Reuse

Borrowing it

Nothing to install: this file belongs to stackrox/stackrox-mcp. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.

Copy the file
curl -O https://raw.githubusercontent.com/stackrox/stackrox-mcp/main/.claude/skills/use-modern-go/SKILL.md
Clone the repo
git clone --depth 1 https://github.com/stackrox/stackrox-mcp

Made for: Claude Code.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for use-modern-go

README.md
[![agentmods](https://agentmods.dev/badge/skills/stackrox/stackrox-mcp/use-modern-go/github.svg)](https://agentmods.dev/skills/stackrox/stackrox-mcp/use-modern-go)
Your own site
<a href="https://agentmods.dev/skills/stackrox/stackrox-mcp/use-modern-go"><img src="https://agentmods.dev/badge/skills/stackrox/stackrox-mcp/use-modern-go/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for use-modern-go

Your own site · 80×15
<a href="https://agentmods.dev/skills/stackrox/stackrox-mcp/use-modern-go"><img src="https://agentmods.dev/badge/skills/stackrox/stackrox-mcp/use-modern-go.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 25 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 2,408 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.
Origin 88% copy Near-identical to another mod in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00025 $0.02408
Opus 5.5 $0.00010 $0.00963
Sonnet 5.5 $0.00005 $0.00482
Haiku 4.5 $0.00003 $0.00241

Measured 2mo ago against content hash 3bcdde3d7dd7, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

use-modern-go scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2mo ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

Origin

This is a copy

88% identical to use-modern-go — 28 lines differ, which has more behind it and is treated as the original. This page carries a canonical link to it rather than competing with it.

.claude/skills/use-modern-go/SKILL.md · 292 lines

How it starts

The opening of the file, as written. The whole thing — 292 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Modern Go Guidelines

Detected Go Version

!grep -rh "^go " --include="go.mod" . 2>/dev/null | cut -d' ' -f2 | sort | uniq -c | sort -nr | head -1 | xargs | cut -d' ' -f2 | grep . || echo unknown

How to Use This Skill

DO NOT search for go.mod files or try to detect the version yourself. Use ONLY the version shown above.

If version detected (not "unknown"):

  • Say: "This project is using Go X.XX, so I’ll stick to modern Go best practices and freely use language features up to and including this version. If you’d prefer a different target version, just let me know."
  • Do NOT list features, do NOT ask for confirmation

If version is "unknown":

  • Say: "Could not detect Go version in this repository"
  • Use AskUserQuestion: "Which Go version should I target?" → [1.23] / [1.24] / [1.25] / [1.26]

When writing Go code, use ALL features from this document up to the target version:

  • Prefer modern built-ins and packages (slices, maps, cmp) over legacy patterns
  • Never use features from newer Go versions than the target
  • Never use outdated patterns when a modern alternative is available

Features by Go Version

Go 1.0+

  • time.Since: time.Since(start) instead of time.Now().Sub(start)

Go 1.8+

  • time.Until: time.Until(deadline) instead of deadline.Sub(time.Now())

Go 1.13+

  • errors.Is: errors.Is(err, target) instead of err == target (works with wrapped errors)

Go 1.18+

  • any: Use any instead of interface{}
  • bytes.Cut: before, after, found := bytes.Cut(b, sep) instead of Index+slice
  • strings.Cut: before, after, found := strings.Cut(s, sep)

Go 1.19+

  • fmt.Appendf: buf = fmt.Appendf(buf, "x=%d", x) instead of []byte(fmt.Sprintf(...))
  • atomic.Bool/atomic.Int64/atomic.Pointer[T]: Type-safe atomics instead of atomic.StoreInt32
var flag atomic.Bool
flag.Store(true)
if flag.Load() { ... }

var ptr atomic.Pointer[Config]
ptr.Store(cfg)

Go 1.20+

  • strings.Clone: strings.Clone(s) to copy string without sharing memory
  • bytes.Clone: bytes.Clone(b) to copy byte slice
  • strings.CutPrefix/CutSuffix: if rest, ok := strings.CutPrefix(s, "pre:"); ok { ... }
  • errors.Join: errors.Join(err1, err2) to combine multiple errors
  • context.WithCancelCause: ctx, cancel := context.WithCancelCause(parent) then cancel(err)
  • context.Cause: context.Cause(ctx) to get the error that caused cancellation

Read the full file on GitHub · 292 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 2mo ago First seen · 292 lines · 25 tokens per session scan A 3bcdde3d7dd7

Subscribe to this mod's changes

use-modern-go is a skill published in the GitHub repository stackrox/stackrox-mcp (4 stars, last pushed yesterday), licensed Apache-2.0. It adds 25 tokens to every session and 2,408 once invoked, about $0.0001 per session on Opus 5.5. A static security scan graded it A with 0 findings. It is 88% identical to use-modern-go, differing in 28 lines, and is treated as a copy.

Related

use-modern-go compared with skills from other repositories

use-modern-go next to 6 skills from other repositories
ModTypeStarsLast pushLicenceScanTokensWorks with
use-modern-gostackrox/stackrox-mcpSkill4yesterdayApache-2.0A25Claude Code
golang-testingaffaan-m/ECCSkill298k5d agoMITA37Claude Code, Kiro
golang-patternsaffaan-m/ECCSkill298k5d agoMITA45Claude Code, Kiro
golang-testingsamber/cc-skills-golangSkill3.8k5d agoMITA115Claude Code
golang-uber-fxsamber/cc-skills-golangSkill3.8k5d agoMITA122Claude Code
golang-samber-oopssamber/cc-skills-golangSkill3.8k5d agoMITA74Claude Code
ax-go-agent-optimizeax-llm/axSkill3.0k3d agoApache-2.0A51Claude Code, Codex