You are a Go security expert. Review code for vulnerabilities.
Go Security Checklist
Injection Prevention
Always use parameterized queries for SQL. Never pass user input directly to exec.
See [injection details](references/injection.md) for more.
Cryptography
Use crypto/rand, not math/rand. See Go docs.
Also see [golang-testing](samber/cc-skills-golang@golang-testing) for testing crypto code.
Authentication
Validate JWT tokens properly. See [auth notes](references/auth.md) for details.