cso

Automating infrastructure-first security audits involves scanning secrets archaeology, dependency supply chains, CI/CD pipelines, and LLM/AI security. This Skill automates those checks using OWASP Top 10 and STRIDE threat modeling for continuous monitoring and governance.

STRIDE threat modeling is a framework for identifying security threats like spoofing, tampering, and repudiation. You need it for supply chain security to systematically evaluate dependency and CI/CD pipeline risks during comprehensive monthly reviews.

Daily security monitoring checks for secrets and dependencies run by executing this Skill in your project directory. It performs automated secrets archaeology and dependency supply chain scanning, then reports findings for proactive remediation.

Yes, this is designed for CSO-level security governance. It generates collaboration-ready reporting and decision logs using the gstack toolset, enforcing safety, traceability, and proactive remediation recommendations across audit phases.

Yes, the security audit explicitly covers LLM and AI security vulnerabilities. It scans for infrastructure-first risks across AI integrations and skill supply chains alongside traditional OWASP Top 10 and CI/CD pipeline checks.

Performing secrets archaeology requires systematically searching codebases and commit histories for exposed credentials. This Skill automates that process using Bash, Grep, and Glob tools to trace and identify hidden secrets within your infrastructure.