Generated banner for Golang Swagger
Generated logo for Golang Swagger

Golang Swagger

Samuel BertheCommunityCreated by samberDistributed by Samuel Berthe

  • Skill
  • Tool integration
  • Software development
  • MIT
  • No issues found

From the author

Golang OpenAPI/Swagger documentation with swaggo/swag — annotation comments (@Summary, @Param, @Success, @Router, @Security), swag init code generation, framework integrations (gin, echo, fiber, chi, net/http), security definitions (Bearer/JWT, OAuth2, API key), and struct tags (swaggertype, enums, example, swaggerignore). Apply when adding or maintaining Swagger/OpenAPI docs in a Go project, or when the codebase imports github.com/swaggo/swag, github.com/swaggo/gin-swagger, github.com/swaggo/echo-swagger, github.com/swaggo/http-swagger, or github.com/swaggo/files.
— the description by samber

AutoGineer summary

Written by AutoGineer from the skill’s own files, not by the author

The golang-swagger skill provides a comprehensive approach to documenting Go APIs by leveraging the swaggo/swag toolchain. It enables developers to define API specifications directly within their source code using annotation comments and struct tags. The skill covers the entire lifecycle of API documentation, including tool installation, annotation patterns for handlers and models, framework-specific UI integration, and the generation of Swagger/OpenAPI specifications. It ensures that documentation remains a reliable contract for API consumers by keeping the spec synchronized with the implementation.

What it does

  • Generates Swagger/OpenAPI documentation from Go source code annotations.
  • Supports major Go web frameworks including Gin, Echo, Fiber, Chi, and net/http.
  • Enables definition of security schemes like Bearer/JWT, OAuth2, and API keys.
  • Provides struct tags for fine-grained control over schema generation and field exclusion.
  • Supports advanced features like generics and nested composition in API responses.
  • Includes formatting tools to maintain consistent annotation style across the codebase.

When to use it

  • When you need to generate and maintain OpenAPI documentation for a Go-based REST API.
  • When you want to keep API documentation and implementation in sync within the same codebase.
  • When you need to expose a Swagger UI endpoint for API testing and discovery.
  • When you need to define complex API schemas, security requirements, or response structures.

Advantages

  • Reduces documentation drift by keeping specs close to the code.
  • Simplifies the creation of interactive API documentation (Swagger UI).
  • Provides a standardized way to define security and parameter requirements.
  • Supports common Go web frameworks with minimal boilerplate.
  • Allows for runtime configuration of API metadata like host and base path.

Usage examples

“Add Swagger documentation to my existing Gin API.”
The agent will install the swag CLI, guide you through adding the necessary annotations to your handler functions, and help you wire the gin-swagger handler to your router.
“How do I document a protected endpoint that requires a Bearer token?”
The agent will show you how to define the security definition in your main.go and apply the @Security Bearer annotation to your specific handler function.
“Generate the Swagger documentation files for my project.”
The agent will execute the swag init command to parse your source code and generate the required docs/ directory containing the OpenAPI specification.
“How can I exclude a sensitive field from my API documentation?”
The agent will instruct you to add the `swaggerignore:"true"` struct tag to the specific field in your Go model.

Install

  1. Download the skill as a ZIP:

    https://autogineer.com/agent-skills/samber/golang-swagger/download
  2. Unzip it into the cross-client skills folder of your project:

    mkdir -p .agents/skills && unzip golang-swagger.zip -d .agents/skills

Documentation by samber

Persona: You are a Go API documentation engineer. You treat docs as a contract — accurate, complete annotations prevent integration bugs and make the Swagger UI the source of truth for API consumers.

Modes:

  • Build — adding Swagger to a new or existing Go project: set up the toolchain, annotate handlers, generate docs, wire the UI endpoint.

  • Audit — reviewing existing swagger annotations for completeness, correctness, and security coverage.

Dependencies:

  • swag: go install github.com/swaggo/swag/cmd/swag@latest

Setup

Three steps to get Swagger UI running:

swag init                        # generates docs/ with docs.go, swagger.json, swagger.yaml
swag init -g cmd/api/main.go     # if general info is not in main.go
swag fmt                         # format annotation comments (like go fmt)

Import the docs package to register the spec. Use a blank import when only wiring the UI; use a named import when you also need to override docs.SwaggerInfo at runtime:

import _ "yourmodule/docs"          // blank: registers spec, no identifier
import docs "yourmodule/docs"       // named: use when overriding SwaggerInfo

Wire the UI endpoint — pick your framework:

// Gin
r.GET("/swagger/*any", ginSwagger.WrapHandler(swaggerFiles.Handler))

// Echo
e.GET("/swagger/*", echoSwagger.WrapHandler)

// Fiber
app.Get("/swagger/*", fiberSwagger.WrapHandler(swaggerFiles.Handler))

// net/http
mux.Handle("/swagger/", httpSwagger.Handler(swaggerFiles.Handler))

// Chi
r.Get("/swagger/*", httpSwagger.Handler(swaggerFiles.Handler))

Access the UI at /swagger/index.html.

For dynamic host/basepath (multi-environment), use a named import and override before serving:

import docs "yourmodule/docs"

docs.SwaggerInfo.Host     = os.Getenv("API_HOST")
docs.SwaggerInfo.BasePath = "/api/v1"

Full CLI reference

General API Info

Place in main.go (or the file passed via -g). These annotations define the top-level spec:

// @title           My API
// @version         1.0
// @description     Short description of the API.
// @host            localhost:8080
// @BasePath        /api/v1
// @schemes         http https

// @contact.name    API Support
// @contact.email   [email protected]
// @license.name    Apache 2.0

// @securityDefinitions.apikey Bearer
// @in header
// @name Authorization
// @description Type "Bearer" followed by a space and the JWT token.

Operation Annotations

Annotate each handler function. The standard doc comment (// FuncName godoc) must precede swag annotations — it anchors indentation for swag fmt.

// ShowAccount godoc
// @Summary      Get account by ID
// @Description  Returns account details for the given ID.
// @Tags         accounts
// @Accept       json
// @Produce      json
// @Param        id      path  int  true  "Account ID"
// @Param        filter  query string false "Optional search filter"
// @Success      200  {object}  model.Account
// @Success      204  "No content"
// @Failure      400  {object}  api.ErrorResponse
// @Failure      404  {object}  api.ErrorResponse
// @Router       /accounts/{id} [get]
// @Security     Bearer
func ShowAccount(c *gin.Context) {}

@Param format: @Param <name> <in> <type> <required> "<description>" [attributes]

<in>Usage
pathURL path segment (/users/{id})
queryURL query string (?filter=x)
bodyRequest body — type must be a struct
headerHTTP header
formDataMultipart/form field

Optional attributes on @Param: default(v), minimum(n), maximum(n), minLength(n), maxLength(n), Enums(a,b,c), example(v), collectionFormat(multi).

@Success/@Failure format: @Success <code> {<kind>} <type> "<description>"

<kind>When
{object}Single struct
{array}Slice of structs
string / integerPrimitive

Generics (swag v2): @Success 200 {object} api.Response[model.User]

Nested composition: @Success 200 {object} api.Response{data=model.User}

Security Definitions

Define once at the API level (in main.go), apply per endpoint with @Security.

// Bearer / JWT
// @securityDefinitions.apikey Bearer
// @in header
// @name Authorization

// API key in header
// @securityDefinitions.apikey ApiKeyAuth
// @in header
// @name X-API-Key

// Basic auth
// @securityDefinitions.basic BasicAuth

// OAuth2 authorization code
// @securityDefinitions.oauth2.authorizationCode OAuth2
// @authorizationUrl https://example.com/oauth/authorize
// @tokenUrl https://example.com/oauth/token
// @scope.read Read access
// @scope.write Write access

Apply to an endpoint:

// @Security Bearer
// @Security OAuth2[read, write]
// @Security BasicAuth && ApiKeyAuth   // AND — both required

Struct Tags

Enrich models without changing their Go type:

type CreateUserRequest struct {
    Name   string `json:"name" example:"Jane Doe" minLength:"2" maxLength:"100"`
    Role   string `json:"role" enums:"admin,user,guest" example:"user"`
    Age    int    `json:"age" minimum:"18" maximum:"120"`
    Avatar []byte `json:"avatar" swaggertype:"string" format:"base64"`
    Secret string `json:"-" swaggerignore:"true"`  // excluded from docs
}
TagPurpose
exampleExample value shown in Swagger UI
enumsComma-separated allowed values
swaggertypeOverride detected type (e.g., "primitive,integer" for time.Time)
swaggerignore:"true"Exclude field from the generated schema
extensionsAdd OpenAPI extensions: extensions:"x-nullable,x-deprecated=true"

Common Mistakes

MistakeWhy it breaksFix
Missing _ "yourmodule/docs" importSchema not registered; UI loads emptyAdd blank import in main.go or server init
Stale docs/ after code changesDocs diverge from implementation; consumers get wrong schemaRe-run swag init after every annotation change
@Param body with primitive typeswag cannot derive schema from string; generation failsAlways use a named struct for body params
No @Security on protected routesSwagger UI shows no lock icon; testers send unauthenticated requestsApply @Security to every authenticated endpoint
General info annotations in the wrong fileswag silently skips them; spec has no title/hostUse -g <file> flag or move annotations to main.go
Using {object} with a map typeswag cannot generate a schema for map[string]any without helpUse a named struct or annotate with swaggertype
Multi-word @Tags without quotesTags split on spaces, producing malformed groupingQuote tags with spaces: @Tags "user accounts"

Cross-References

  • → See samber/cc-skills-golang@golang-security for securing the Swagger UI endpoint in production (disable or gate with auth middleware).

  • → See samber/cc-skills-golang@golang-grpc for gRPC — use grpc-gateway with its own OpenAPI generator instead of swag.

This skill is not exhaustive — refer to the swaggo/swag documentation and code examples for up-to-date API signatures and usage patterns:

  • For Go package docs, symbols, versions, importers, and known vulnerabilities, → See samber/cc-skills-golang@golang-pkg-go-dev skill (godig), preferred over Context7 for Go package facts.

  • To navigate this library's usage in your own code (definitions, call sites, diagnostics), → See samber/cc-skills-golang@golang-gopls skill (gopls).

  • Context7 remains a fallback for docs not indexed on pkg.go.dev.

If you encounter a bug or unexpected behavior in swag, open an issue at https://github.com/swaggo/swag/issues.

Files

evals/evals.json

{
  "skill_name": "golang-swagger",
  "evals": [
    {
      "id": 1,
      "prompt": "I've already run `swag init` and the docs/ folder was generated. Now wire up the Swagger UI in my Gin server so the docs actually show up at /swagger/index.html. Here's my main.go:\n\n```go\npackage main\n\nimport \"github.com/gin-gonic/gin\"\n\nfunc main() {\n    r := gin.Default()  \n    r.GET(\"/api/users\", getUsers)\n    r.Run(\":8080\")\n}\n```",
      "expected_output": "Adds the blank import `_ \"yourmodule/docs\"` AND wires the ginSwagger endpoint. The blank import is the trap — without it the UI loads empty even if the route is registered.",
      "assertions": [
        "Adds a blank import of the docs package (e.g., `_ \"<module>/docs\"`)",
        "Imports github.com/swaggo/gin-swagger",
        "Imports github.com/swaggo/files",
        "Registers a GET route matching /swagger/*any using ginSwagger.WrapHandler",
        "Does not suggest running swag init again (it was already done)"
      ]
    },
    {
      "id": 2,
      "prompt": "Our GET /settings endpoint returns a dynamic set of feature flags as a map: `map[string]bool`. Document this endpoint for Swagger so the response schema is visible in the UI.",
      "expected_output": "Defines a named struct for the response or uses swaggertype annotation — swag cannot generate a schema for map[string]bool directly. The trap is using `{object} map[string]bool` in @Success which fails generation.",
      "assertions": [
        "Does NOT use `{object} map[string]bool` directly in @Success",
        "Defines a named struct for the response OR acknowledges a swaggertype workaround is needed",
        "@Success annotation uses a named type (not a raw map literal)",
        "@Router annotation is present with [get] method",
        "@Produce annotation specifies json"
      ]
    },
    {
      "id": 3,
      "prompt": "Document this Go struct for Swagger. We need the docs to look correct:\n\n```go\ntype AuditRecord struct {\n    CreatedAt time.Time\n    UpdatedAt time.Time\n    Payload   []byte\n}\n```",
      "expected_output": "Uses swaggertype tag to override time.Time (which becomes an object by default) and []byte (which becomes a base64 string). Without the skill the model leaves the types as-is, producing wrong schemas.",
      "assertions": [
        "Adds swaggertype tag to CreatedAt field (e.g., `swaggertype:\"string\"` with format:\"date-time\" or `swaggertype:\"primitive,integer\"`)",
        "Adds swaggertype tag to UpdatedAt field with the same treatment",
        "Adds swaggertype:\"string\" and format:\"base64\" to the Payload []byte field",
        "Preserves the json tags (does not remove them)",
        "Does not leave time.Time fields without any swaggertype override"
      ]
    },
    {
      "id": 4,
      "prompt": "Set up the Swagger UI for a Chi HTTP router. The BasePath must be set dynamically from an `API_BASE_PATH` environment variable because we deploy behind different path prefixes in staging and production.",
      "expected_output": "Uses github.com/swaggo/http-swagger for Chi AND sets docs.SwaggerInfo.BasePath from os.Getenv. The trap is not knowing the http-swagger package for Chi and not knowing about the runtime docs.SwaggerInfo override.",
      "assertions": [
        "Imports github.com/swaggo/http-swagger",
        "Uses r.Get (chi method) to register the swagger route with a wildcard pattern",
        "Sets docs.SwaggerInfo.BasePath using os.Getenv(\"API_BASE_PATH\") or equivalent",
        "Imports the docs package (blank `_ \"<module>/docs\"` or named `docs \"<module>/docs\"`)",
        "Does not suggest rebuilding or running swag init per environment"
      ]
    },
    {
      "id": 5,
      "prompt": "This endpoint requires BOTH an API key AND basic authentication — not one or the other. Both must be present. Show me the @Security annotation for this.",
      "expected_output": "Uses the && syntax on a single @Security line. Two separate @Security lines mean OR (either is sufficient), which is wrong for AND semantics.",
      "assertions": [
        "Uses && between security schemes on a single @Security annotation line",
        "Does NOT write two separate @Security lines for AND semantics",
        "References valid security definition names (ApiKeyAuth, BasicAuth, or similar)",
        "Explains or implies that two separate @Security lines would mean OR, not AND",
        "@Security line appears inside the handler doc comment block"
      ]
    },
    {
      "id": 6,
      "prompt": "Our API has endpoints tagged with 'Internal' and 'Admin' that must not appear in the public Swagger docs we ship to customers. How do we generate a spec that excludes both of these tags?",
      "expected_output": "Uses swag init --tags flag with ! prefix to exclude tags. Without the skill the model likely suggests code-level filtering, separate spec files, or post-processing the JSON rather than the built-in CLI flag.",
      "assertions": [
        "Uses the --tags flag (or -t) with swag init",
        "Uses ! prefix to exclude tags (e.g., --tags '!Internal,!Admin' or similar)",
        "Shows a complete swag init command",
        "Does not suggest manually editing the generated swagger.json",
        "Does not require writing custom Go code to filter endpoints"
      ]
    },
    {
      "id": 7,
      "prompt": "Add swagger annotations to this handler and make sure `swag fmt` formats them correctly:\n\n```go\nfunc CreateOrder(c *gin.Context) {\n    // handler logic\n}\n```",
      "expected_output": "Includes a standard godoc comment (// CreateOrder godoc) before the @Summary annotation. Without it swag fmt cannot determine indentation and may produce malformed output.",
      "assertions": [
        "Adds `// CreateOrder godoc` as the first line of the comment block",
        "godoc comment appears before any @ annotation",
        "At minimum includes @Summary, @Router annotations",
        "@Router specifies both path and HTTP method",
        "Annotation block is placed directly above the function signature"
      ]
    },
    {
      "id": 8,
      "prompt": "Document a GET /export endpoint with two query parameters: `ids` accepts multiple values as separate query keys (e.g., ?ids=1&ids=2&ids=3), and `fields` accepts a comma-separated list of field names (e.g., ?fields=name,email,age). Both are optional.",
      "expected_output": "Uses collectionFormat(multi) for ids and collectionFormat(csv) for fields. Without the skill the model likely uses multi for both, or omits the collectionFormat attribute entirely and lets it default.",
      "assertions": [
        "@Param for ids uses collectionFormat(multi)",
        "@Param for fields uses collectionFormat(csv) or omits it (csv is the default)",
        "Both params use []string or []int as data type",
        "Both params are marked as not required (false)",
        "@Router annotation is present with [get] method"
      ]
    },
    {
      "id": 9,
      "prompt": "We want to expose the Swagger UI in development but disable it entirely in production. Our app reads `APP_ENV=production` or `APP_ENV=development`. How do we conditionally enable the swagger endpoint without separate builds or build tags?",
      "expected_output": "Guards the swagger route registration behind an os.Getenv check at startup. The trap is suggesting build tags (requires separate builds) or removing the route in a middleware (more complex than needed).",
      "assertions": [
        "Uses os.Getenv (or equivalent) to read APP_ENV at runtime",
        "Conditionally registers the swagger route only when not in production",
        "Does not require separate builds or build tags",
        "The blank docs import is still present (or acknowledged as needed)",
        "Solution works without recompiling between environments"
      ]
    },
    {
      "id": 10,
      "prompt": "Our API always wraps responses in this envelope:\n\n```go\ntype Envelope struct {\n    Data    interface{} `json:\"data\"`\n    Message string      `json:\"message\"`\n}\n```\n\nDocument a GET /users/{id} endpoint that returns an Envelope where Data is a User object. The Swagger UI should show the actual User schema inside data, not just `interface{}`.",
      "expected_output": "Uses nested composition syntax @Success 200 {object} Envelope{data=model.User}. Without the skill the model would document it as plain Envelope, losing the User type information in the generated schema.",
      "assertions": [
        "@Success annotation uses nested composition syntax with curly braces (e.g., Envelope{data=model.User})",
        "The inner type is the User struct (or equivalent named type)",
        "Does not create a new wrapper struct just for documentation purposes",
        "@Param for the id path parameter is present with path location",
        "@Router specifies the correct path and [get] method"
      ]
    },
    {
      "id": 11,
      "prompt": "Add swagger documentation to this struct. The Role field should only allow the values 'admin', 'editor', and 'viewer' in the Swagger UI. The Score field should be between 0 and 100.\n\n```go\ntype UserProfile struct {\n    Name  string\n    Role  string\n    Score int\n}\n```",
      "expected_output": "Uses enums struct tag for Role and minimum/maximum tags for Score. Without the skill the model might only describe constraints in comments or @Param descriptions.",
      "assertions": [
        "Adds `enums:\"admin,editor,viewer\"` struct tag to Role field",
        "Adds `minimum:\"0\"` and `maximum:\"100\"` struct tags to Score field",
        "Adds json tags to all fields",
        "Adds example tags to at least one field",
        "Does not only describe constraints in a comment — they must be machine-readable struct tags"
      ]
    },
    {
      "id": 12,
      "prompt": "We have a struct with a `LastModified time.Time` field used for ETag generation in middleware. This field MUST be serialized to JSON for our caching layer to work, but it should NOT appear in the Swagger UI documentation shown to API consumers.",
      "expected_output": "Uses swaggerignore:\"true\" while keeping the json tag intact. The trap is using json:\"-\" which breaks JSON serialization — the model must understand that swaggerignore is the correct tool when the field must still serialize.",
      "assertions": [
        "Uses swaggerignore:\"true\" on the LastModified field",
        "Keeps a valid json tag on LastModified (NOT json:\"-\")",
        "Does NOT suggest removing the field from the struct",
        "Other struct fields retain their json and swagger documentation",
        "Explains or implies why json:\"-\" would be wrong here (breaks serialization)"
      ]
    }
  ]
}

Requirements and compatibility

Written for: Claude Code, OpenAI Codex

Works with: Claude Code, Claude apps, OpenAI Codex, GitHub Copilot, Cursor, Gemini CLI, Kiro, OpenCode, Goose, Amp, Roo Code, JetBrains Junie, Factory Droid, Devin (ex-Windsurf), Mistral Vibe, OpenHands, Letta

“Works with” means the tool reads the open Agent Skills format; a skill written for one tool may use features others lack.

Needs: Declares allowed tools, Claude Code frontmatter, Needs an API key

The author says: Designed for Claude Code, Codex or similar harness. Requires go and swag CLI.

Security

No issues found by our static scan· No issues found

A static scan is not a guarantee. Skills are third-party content: review a skill before you let an agent use it.

Attribution and licence

Created by
samber
Publisher
Samuel Berthe (Community)
Distributed by
Samuel Berthe
Source
samber/cc-skills-golang · skills/golang-swagger · commit bb1d43d
Licence
MIT License (redistribution allowed)
  • LICENSE (added by AutoGineer from LICENSE)
  • ATTRIBUTION.md (written by AutoGineer)
Synced

AutoGineer is not affiliated with or endorsed by samber or Samuel Berthe.

Download ZIP

The ZIP holds the skill’s files, its licence files and an ATTRIBUTION.md. Download golang-swagger.zip