Golang Swagger
Samuel BertheCommunityCreated by samberDistributed by Samuel Berthe
- Skill
- Tool integration
- Software development
- MIT
- No issues found
AutoGineer summary
Written by AutoGineer from the skill’s own files, not by the author
The golang-swagger skill provides a comprehensive approach to documenting Go APIs by leveraging the swaggo/swag toolchain. It enables developers to define API specifications directly within their source code using annotation comments and struct tags. The skill covers the entire lifecycle of API documentation, including tool installation, annotation patterns for handlers and models, framework-specific UI integration, and the generation of Swagger/OpenAPI specifications. It ensures that documentation remains a reliable contract for API consumers by keeping the spec synchronized with the implementation.
What it does
- Generates Swagger/OpenAPI documentation from Go source code annotations.
- Supports major Go web frameworks including Gin, Echo, Fiber, Chi, and net/http.
- Enables definition of security schemes like Bearer/JWT, OAuth2, and API keys.
- Provides struct tags for fine-grained control over schema generation and field exclusion.
- Supports advanced features like generics and nested composition in API responses.
- Includes formatting tools to maintain consistent annotation style across the codebase.
When to use it
- When you need to generate and maintain OpenAPI documentation for a Go-based REST API.
- When you want to keep API documentation and implementation in sync within the same codebase.
- When you need to expose a Swagger UI endpoint for API testing and discovery.
- When you need to define complex API schemas, security requirements, or response structures.
Advantages
- Reduces documentation drift by keeping specs close to the code.
- Simplifies the creation of interactive API documentation (Swagger UI).
- Provides a standardized way to define security and parameter requirements.
- Supports common Go web frameworks with minimal boilerplate.
- Allows for runtime configuration of API metadata like host and base path.
Usage examples
- “Add Swagger documentation to my existing Gin API.”
- The agent will install the swag CLI, guide you through adding the necessary annotations to your handler functions, and help you wire the gin-swagger handler to your router.
- “How do I document a protected endpoint that requires a Bearer token?”
- The agent will show you how to define the security definition in your main.go and apply the @Security Bearer annotation to your specific handler function.
- “Generate the Swagger documentation files for my project.”
- The agent will execute the swag init command to parse your source code and generate the required docs/ directory containing the OpenAPI specification.
- “How can I exclude a sensitive field from my API documentation?”
- The agent will instruct you to add the `swaggerignore:"true"` struct tag to the specific field in your Go model.
Install
Download the skill as a ZIP:
https://autogineer.com/agent-skills/samber/golang-swagger/downloadUnzip it into the cross-client skills folder of your project:
mkdir -p .agents/skills && unzip golang-swagger.zip -d .agents/skills
Documentation by samber
Persona: You are a Go API documentation engineer. You treat docs as a contract — accurate, complete annotations prevent integration bugs and make the Swagger UI the source of truth for API consumers.
Modes:
Build — adding Swagger to a new or existing Go project: set up the toolchain, annotate handlers, generate docs, wire the UI endpoint.
Audit — reviewing existing swagger annotations for completeness, correctness, and security coverage.
Dependencies:
swag:
go install github.com/swaggo/swag/cmd/swag@latest
Setup
Three steps to get Swagger UI running:
swag init # generates docs/ with docs.go, swagger.json, swagger.yaml
swag init -g cmd/api/main.go # if general info is not in main.go
swag fmt # format annotation comments (like go fmt)Import the docs package to register the spec. Use a blank import when only wiring the UI; use a named import when you also need to override docs.SwaggerInfo at runtime:
import _ "yourmodule/docs" // blank: registers spec, no identifier
import docs "yourmodule/docs" // named: use when overriding SwaggerInfoWire the UI endpoint — pick your framework:
// Gin
r.GET("/swagger/*any", ginSwagger.WrapHandler(swaggerFiles.Handler))
// Echo
e.GET("/swagger/*", echoSwagger.WrapHandler)
// Fiber
app.Get("/swagger/*", fiberSwagger.WrapHandler(swaggerFiles.Handler))
// net/http
mux.Handle("/swagger/", httpSwagger.Handler(swaggerFiles.Handler))
// Chi
r.Get("/swagger/*", httpSwagger.Handler(swaggerFiles.Handler))Access the UI at /swagger/index.html.
For dynamic host/basepath (multi-environment), use a named import and override before serving:
import docs "yourmodule/docs"
docs.SwaggerInfo.Host = os.Getenv("API_HOST")
docs.SwaggerInfo.BasePath = "/api/v1"General API Info
Place in main.go (or the file passed via -g). These annotations define the top-level spec:
// @title My API
// @version 1.0
// @description Short description of the API.
// @host localhost:8080
// @BasePath /api/v1
// @schemes http https
// @contact.name API Support
// @contact.email [email protected]
// @license.name Apache 2.0
// @securityDefinitions.apikey Bearer
// @in header
// @name Authorization
// @description Type "Bearer" followed by a space and the JWT token.Operation Annotations
Annotate each handler function. The standard doc comment (// FuncName godoc) must precede swag annotations — it anchors indentation for swag fmt.
// ShowAccount godoc
// @Summary Get account by ID
// @Description Returns account details for the given ID.
// @Tags accounts
// @Accept json
// @Produce json
// @Param id path int true "Account ID"
// @Param filter query string false "Optional search filter"
// @Success 200 {object} model.Account
// @Success 204 "No content"
// @Failure 400 {object} api.ErrorResponse
// @Failure 404 {object} api.ErrorResponse
// @Router /accounts/{id} [get]
// @Security Bearer
func ShowAccount(c *gin.Context) {}@Param format: @Param <name> <in> <type> <required> "<description>" [attributes]
<in> | Usage |
|---|---|
path | URL path segment (/users/{id}) |
query | URL query string (?filter=x) |
body | Request body — type must be a struct |
header | HTTP header |
formData | Multipart/form field |
Optional attributes on @Param: default(v), minimum(n), maximum(n), minLength(n), maxLength(n), Enums(a,b,c), example(v), collectionFormat(multi).
@Success/@Failure format: @Success <code> {<kind>} <type> "<description>"
<kind> | When |
|---|---|
{object} | Single struct |
{array} | Slice of structs |
string / integer | Primitive |
Generics (swag v2): @Success 200 {object} api.Response[model.User]
Nested composition: @Success 200 {object} api.Response{data=model.User}
Security Definitions
Define once at the API level (in main.go), apply per endpoint with @Security.
// Bearer / JWT
// @securityDefinitions.apikey Bearer
// @in header
// @name Authorization
// API key in header
// @securityDefinitions.apikey ApiKeyAuth
// @in header
// @name X-API-Key
// Basic auth
// @securityDefinitions.basic BasicAuth
// OAuth2 authorization code
// @securityDefinitions.oauth2.authorizationCode OAuth2
// @authorizationUrl https://example.com/oauth/authorize
// @tokenUrl https://example.com/oauth/token
// @scope.read Read access
// @scope.write Write accessApply to an endpoint:
// @Security Bearer
// @Security OAuth2[read, write]
// @Security BasicAuth && ApiKeyAuth // AND — both requiredStruct Tags
Enrich models without changing their Go type:
type CreateUserRequest struct {
Name string `json:"name" example:"Jane Doe" minLength:"2" maxLength:"100"`
Role string `json:"role" enums:"admin,user,guest" example:"user"`
Age int `json:"age" minimum:"18" maximum:"120"`
Avatar []byte `json:"avatar" swaggertype:"string" format:"base64"`
Secret string `json:"-" swaggerignore:"true"` // excluded from docs
}| Tag | Purpose |
|---|---|
example | Example value shown in Swagger UI |
enums | Comma-separated allowed values |
swaggertype | Override detected type (e.g., "primitive,integer" for time.Time) |
swaggerignore:"true" | Exclude field from the generated schema |
extensions | Add OpenAPI extensions: extensions:"x-nullable,x-deprecated=true" |
Common Mistakes
| Mistake | Why it breaks | Fix |
|---|---|---|
Missing _ "yourmodule/docs" import | Schema not registered; UI loads empty | Add blank import in main.go or server init |
Stale docs/ after code changes | Docs diverge from implementation; consumers get wrong schema | Re-run swag init after every annotation change |
@Param body with primitive type | swag cannot derive schema from string; generation fails | Always use a named struct for body params |
No @Security on protected routes | Swagger UI shows no lock icon; testers send unauthenticated requests | Apply @Security to every authenticated endpoint |
| General info annotations in the wrong file | swag silently skips them; spec has no title/host | Use -g <file> flag or move annotations to main.go |
Using {object} with a map type | swag cannot generate a schema for map[string]any without help | Use a named struct or annotate with swaggertype |
Multi-word @Tags without quotes | Tags split on spaces, producing malformed grouping | Quote tags with spaces: @Tags "user accounts" |
Cross-References
→ See
samber/cc-skills-golang@golang-securityfor securing the Swagger UI endpoint in production (disable or gate with auth middleware).→ See
samber/cc-skills-golang@golang-grpcfor gRPC — use grpc-gateway with its own OpenAPI generator instead of swag.
This skill is not exhaustive — refer to the swaggo/swag documentation and code examples for up-to-date API signatures and usage patterns:
For Go package docs, symbols, versions, importers, and known vulnerabilities, → See
samber/cc-skills-golang@golang-pkg-go-devskill (godig), preferred over Context7 for Go package facts.To navigate this library's usage in your own code (definitions, call sites, diagnostics), → See
samber/cc-skills-golang@golang-goplsskill (gopls).Context7 remains a fallback for docs not indexed on pkg.go.dev.
If you encounter a bug or unexpected behavior in swag, open an issue at https://github.com/swaggo/swag/issues.
Files
- ATTRIBUTION.mdAdded by AutoGineer899 B
- LICENSELicence file added by AutoGineer1.0 KiB
- SKILL.md9.1 KiB
- evals/evals.json10.6 KiB
- references/swag-cli.md5.0 KiB
evals/evals.json
{
"skill_name": "golang-swagger",
"evals": [
{
"id": 1,
"prompt": "I've already run `swag init` and the docs/ folder was generated. Now wire up the Swagger UI in my Gin server so the docs actually show up at /swagger/index.html. Here's my main.go:\n\n```go\npackage main\n\nimport \"github.com/gin-gonic/gin\"\n\nfunc main() {\n r := gin.Default() \n r.GET(\"/api/users\", getUsers)\n r.Run(\":8080\")\n}\n```",
"expected_output": "Adds the blank import `_ \"yourmodule/docs\"` AND wires the ginSwagger endpoint. The blank import is the trap — without it the UI loads empty even if the route is registered.",
"assertions": [
"Adds a blank import of the docs package (e.g., `_ \"<module>/docs\"`)",
"Imports github.com/swaggo/gin-swagger",
"Imports github.com/swaggo/files",
"Registers a GET route matching /swagger/*any using ginSwagger.WrapHandler",
"Does not suggest running swag init again (it was already done)"
]
},
{
"id": 2,
"prompt": "Our GET /settings endpoint returns a dynamic set of feature flags as a map: `map[string]bool`. Document this endpoint for Swagger so the response schema is visible in the UI.",
"expected_output": "Defines a named struct for the response or uses swaggertype annotation — swag cannot generate a schema for map[string]bool directly. The trap is using `{object} map[string]bool` in @Success which fails generation.",
"assertions": [
"Does NOT use `{object} map[string]bool` directly in @Success",
"Defines a named struct for the response OR acknowledges a swaggertype workaround is needed",
"@Success annotation uses a named type (not a raw map literal)",
"@Router annotation is present with [get] method",
"@Produce annotation specifies json"
]
},
{
"id": 3,
"prompt": "Document this Go struct for Swagger. We need the docs to look correct:\n\n```go\ntype AuditRecord struct {\n CreatedAt time.Time\n UpdatedAt time.Time\n Payload []byte\n}\n```",
"expected_output": "Uses swaggertype tag to override time.Time (which becomes an object by default) and []byte (which becomes a base64 string). Without the skill the model leaves the types as-is, producing wrong schemas.",
"assertions": [
"Adds swaggertype tag to CreatedAt field (e.g., `swaggertype:\"string\"` with format:\"date-time\" or `swaggertype:\"primitive,integer\"`)",
"Adds swaggertype tag to UpdatedAt field with the same treatment",
"Adds swaggertype:\"string\" and format:\"base64\" to the Payload []byte field",
"Preserves the json tags (does not remove them)",
"Does not leave time.Time fields without any swaggertype override"
]
},
{
"id": 4,
"prompt": "Set up the Swagger UI for a Chi HTTP router. The BasePath must be set dynamically from an `API_BASE_PATH` environment variable because we deploy behind different path prefixes in staging and production.",
"expected_output": "Uses github.com/swaggo/http-swagger for Chi AND sets docs.SwaggerInfo.BasePath from os.Getenv. The trap is not knowing the http-swagger package for Chi and not knowing about the runtime docs.SwaggerInfo override.",
"assertions": [
"Imports github.com/swaggo/http-swagger",
"Uses r.Get (chi method) to register the swagger route with a wildcard pattern",
"Sets docs.SwaggerInfo.BasePath using os.Getenv(\"API_BASE_PATH\") or equivalent",
"Imports the docs package (blank `_ \"<module>/docs\"` or named `docs \"<module>/docs\"`)",
"Does not suggest rebuilding or running swag init per environment"
]
},
{
"id": 5,
"prompt": "This endpoint requires BOTH an API key AND basic authentication — not one or the other. Both must be present. Show me the @Security annotation for this.",
"expected_output": "Uses the && syntax on a single @Security line. Two separate @Security lines mean OR (either is sufficient), which is wrong for AND semantics.",
"assertions": [
"Uses && between security schemes on a single @Security annotation line",
"Does NOT write two separate @Security lines for AND semantics",
"References valid security definition names (ApiKeyAuth, BasicAuth, or similar)",
"Explains or implies that two separate @Security lines would mean OR, not AND",
"@Security line appears inside the handler doc comment block"
]
},
{
"id": 6,
"prompt": "Our API has endpoints tagged with 'Internal' and 'Admin' that must not appear in the public Swagger docs we ship to customers. How do we generate a spec that excludes both of these tags?",
"expected_output": "Uses swag init --tags flag with ! prefix to exclude tags. Without the skill the model likely suggests code-level filtering, separate spec files, or post-processing the JSON rather than the built-in CLI flag.",
"assertions": [
"Uses the --tags flag (or -t) with swag init",
"Uses ! prefix to exclude tags (e.g., --tags '!Internal,!Admin' or similar)",
"Shows a complete swag init command",
"Does not suggest manually editing the generated swagger.json",
"Does not require writing custom Go code to filter endpoints"
]
},
{
"id": 7,
"prompt": "Add swagger annotations to this handler and make sure `swag fmt` formats them correctly:\n\n```go\nfunc CreateOrder(c *gin.Context) {\n // handler logic\n}\n```",
"expected_output": "Includes a standard godoc comment (// CreateOrder godoc) before the @Summary annotation. Without it swag fmt cannot determine indentation and may produce malformed output.",
"assertions": [
"Adds `// CreateOrder godoc` as the first line of the comment block",
"godoc comment appears before any @ annotation",
"At minimum includes @Summary, @Router annotations",
"@Router specifies both path and HTTP method",
"Annotation block is placed directly above the function signature"
]
},
{
"id": 8,
"prompt": "Document a GET /export endpoint with two query parameters: `ids` accepts multiple values as separate query keys (e.g., ?ids=1&ids=2&ids=3), and `fields` accepts a comma-separated list of field names (e.g., ?fields=name,email,age). Both are optional.",
"expected_output": "Uses collectionFormat(multi) for ids and collectionFormat(csv) for fields. Without the skill the model likely uses multi for both, or omits the collectionFormat attribute entirely and lets it default.",
"assertions": [
"@Param for ids uses collectionFormat(multi)",
"@Param for fields uses collectionFormat(csv) or omits it (csv is the default)",
"Both params use []string or []int as data type",
"Both params are marked as not required (false)",
"@Router annotation is present with [get] method"
]
},
{
"id": 9,
"prompt": "We want to expose the Swagger UI in development but disable it entirely in production. Our app reads `APP_ENV=production` or `APP_ENV=development`. How do we conditionally enable the swagger endpoint without separate builds or build tags?",
"expected_output": "Guards the swagger route registration behind an os.Getenv check at startup. The trap is suggesting build tags (requires separate builds) or removing the route in a middleware (more complex than needed).",
"assertions": [
"Uses os.Getenv (or equivalent) to read APP_ENV at runtime",
"Conditionally registers the swagger route only when not in production",
"Does not require separate builds or build tags",
"The blank docs import is still present (or acknowledged as needed)",
"Solution works without recompiling between environments"
]
},
{
"id": 10,
"prompt": "Our API always wraps responses in this envelope:\n\n```go\ntype Envelope struct {\n Data interface{} `json:\"data\"`\n Message string `json:\"message\"`\n}\n```\n\nDocument a GET /users/{id} endpoint that returns an Envelope where Data is a User object. The Swagger UI should show the actual User schema inside data, not just `interface{}`.",
"expected_output": "Uses nested composition syntax @Success 200 {object} Envelope{data=model.User}. Without the skill the model would document it as plain Envelope, losing the User type information in the generated schema.",
"assertions": [
"@Success annotation uses nested composition syntax with curly braces (e.g., Envelope{data=model.User})",
"The inner type is the User struct (or equivalent named type)",
"Does not create a new wrapper struct just for documentation purposes",
"@Param for the id path parameter is present with path location",
"@Router specifies the correct path and [get] method"
]
},
{
"id": 11,
"prompt": "Add swagger documentation to this struct. The Role field should only allow the values 'admin', 'editor', and 'viewer' in the Swagger UI. The Score field should be between 0 and 100.\n\n```go\ntype UserProfile struct {\n Name string\n Role string\n Score int\n}\n```",
"expected_output": "Uses enums struct tag for Role and minimum/maximum tags for Score. Without the skill the model might only describe constraints in comments or @Param descriptions.",
"assertions": [
"Adds `enums:\"admin,editor,viewer\"` struct tag to Role field",
"Adds `minimum:\"0\"` and `maximum:\"100\"` struct tags to Score field",
"Adds json tags to all fields",
"Adds example tags to at least one field",
"Does not only describe constraints in a comment — they must be machine-readable struct tags"
]
},
{
"id": 12,
"prompt": "We have a struct with a `LastModified time.Time` field used for ETag generation in middleware. This field MUST be serialized to JSON for our caching layer to work, but it should NOT appear in the Swagger UI documentation shown to API consumers.",
"expected_output": "Uses swaggerignore:\"true\" while keeping the json tag intact. The trap is using json:\"-\" which breaks JSON serialization — the model must understand that swaggerignore is the correct tool when the field must still serialize.",
"assertions": [
"Uses swaggerignore:\"true\" on the LastModified field",
"Keeps a valid json tag on LastModified (NOT json:\"-\")",
"Does NOT suggest removing the field from the struct",
"Other struct fields retain their json and swagger documentation",
"Explains or implies why json:\"-\" would be wrong here (breaks serialization)"
]
}
]
}
Requirements and compatibility
Written for: Claude Code, OpenAI Codex
Works with: Claude Code, Claude apps, OpenAI Codex, GitHub Copilot, Cursor, Gemini CLI, Kiro, OpenCode, Goose, Amp, Roo Code, JetBrains Junie, Factory Droid, Devin (ex-Windsurf), Mistral Vibe, OpenHands, Letta
“Works with” means the tool reads the open Agent Skills format; a skill written for one tool may use features others lack.
Needs: Declares allowed tools, Claude Code frontmatter, Needs an API key
The author says: Designed for Claude Code, Codex or similar harness. Requires go and swag CLI.
Security
No issues found by our static scan· No issues found
A static scan is not a guarantee. Skills are third-party content: review a skill before you let an agent use it.
Attribution and licence
- Created by
- samber
- Publisher
- Samuel Berthe (Community)
- Distributed by
- Samuel Berthe
- Source
- samber/cc-skills-golang · skills/golang-swagger · commit bb1d43d
- Licence
- MIT License (redistribution allowed)
- LICENSE (added by AutoGineer from LICENSE)
- ATTRIBUTION.md (written by AutoGineer)
- Synced
AutoGineer is not affiliated with or endorsed by samber or Samuel Berthe.
Download ZIP
The ZIP holds the skill’s files, its licence files and an ATTRIBUTION.md. Download golang-swagger.zip