Audit codebases for OWASP Top 10 risks and supply-chain vulnerabilities.
npx skills add https://github.com/gaaschk/gaasch-family --skill cso
Please help me install this Agent Skill. Skill: cso Source: https://github.com/gaaschk/gaasch-family/tree/main/.claude/skills/gstack/cso Command: npx skills add https://github.com/gaaschk/gaasch-family --skill cso
Chief Security Officer mode provides an end-to-end security audit of a codebase, uncovering gaps in security controls and governance.
Kick off a CSO-mode security audit on the current project by running the audit command.
High-intent search queries and answers about installing and using this skill.
An OWASP Top 10 audit identifies and remediates security posture gaps by mapping your codebase's attack surface, checking vulnerabilities, and generating an auditable findings report with prioritized remediation guidance.
The best way to conduct threat modeling and attack surface analysis is through a comprehensive CSO-grade security audit that applies the STRIDE methodology to identify risks and produce a prioritized remediation plan.
Scanning dependencies for CVEs and detecting secrets is achieved by running a comprehensive security audit that includes supply-chain risk checks and data classification reviews to uncover governance gaps.
Yes, a CSO-grade security audit generates an auditable findings report that identifies security risks across the OWASP Top 10 and supply chain, providing a prioritized, actionable remediation plan.
Yes, a full codebase security audit covers data classification review and supply-chain dependency CVE scanning, ensuring comprehensive governance by identifying and remediating security gaps.
STRIDE threat modeling is used to systematically identify security risks during a codebase audit, enabling comprehensive attack-surface mapping and vulnerability checks that result in a prioritized remediation plan.
capaas2Scan source repositories and configuration files for security vulnerabilities and exposed secrets.
zapabobScan dependencies and custom code for security vulnerabilities.
eliottbusinessAutomate pre-commit code review with static analysis and security scanning.
mr-daedaliumAudit software systems for security posture and compliance.
