Scan source code for OWASP Top 10 vulnerabilities and STRIDE threats.
npx skills add https://github.com/All-The-Vibes/ATV-StarterKit --skill cso-all-the-vibes
Please help me install this Agent Skill. Skill: cso Source: https://github.com/All-The-Vibes/ATV-StarterKit/tree/main/pkg/scaffold/templates/skills/cso Command: npx skills add https://github.com/All-The-Vibes/ATV-StarterKit --skill cso-all-the-vibes
This skill helps developers and security teams identify common web application vulnerabilities (OWASP Top 10) and model potential threats using STRIDE, directly from the source code.
Run /cso on your project to start a full OWASP Top 10 + STRIDE assessment.
High-intent search queries and answers about installing and using this skill.
To scan source code for OWASP Top 10 vulnerabilities, the tool discovers application entry points and scans source files to surface security flaws. It then produces a structured security report with automated recommendations.
STRIDE threat modeling maps potential security threats to application components and data flows. It identifies spoofing, tampering, repudiation, information disclosure, denial of service, and elevation of privilege risks within your source code.
You can run a full security assessment on Node.js, Python, and Ruby stacks by executing a single command. The tool scans the source code to identify entry points and generates a structured report with a threat matrix.
Yes, the security scanner supports Node.js, Python, Ruby, and other tech stacks. It discovers entry points across these platforms to perform comprehensive OWASP Top 10 and STRIDE threat analysis.
Application security reports are generated as centralized documents containing a threat matrix and actionable recommendations. They are persistently saved to a dated folder within the project's docs/security directory.
kenhiaAutomate security audits for GitHub projects by scanning source code for vulnerabilities.
mdproctorAudit Java/Quarkus applications for OWASP Top 10 vulnerabilities and remediation.
oioio-spaceAnalyze Go code for security vulnerabilities using gosec and govulncheck.
arcasilesgroupRun unified security scans for SAST, DAST, dependencies, and SBOM generation.
