Detect security risks across code, dependencies, and infrastructure using Bash and Grep.
npx skills add https://github.com/andrew-t-james/dotfiles --skill cso-andrew-t-james
Please help me install this Agent Skill. Skill: cso Source: https://github.com/andrew-t-james/dotfiles/tree/main/dot_claude/skills/cso Command: npx skills add https://github.com/andrew-t-james/dotfiles --skill cso-andrew-t-james
Audits security posture across code, dependencies, and CI/CD pipelines to surface credentials, misconfigurations, and governance gaps.
Invoke the audit by typing /cso to start a full security posture assessment.
High-intent search queries and answers about installing and using this skill.
To audit exposed secrets, perform secrets archaeology by scanning git history and CI configurations for hardcoded credentials and tokens, producing an inventory of hidden risks for remediation.
STRIDE threat modeling is a structured method to identify attack surfaces across project architectures by categorizing security risks. You need it to systematically evaluate governance gaps and guide remediation efforts.
Check dependency supply chain risks by inventorying libraries and transitive dependencies against known vulnerabilities. Use reproducible web search checks to evaluate exposure risks and surface recommended mitigations for insecure packages.
Yes, you can use this security audit to evaluate CI/CD pipelines. It identifies infrastructure misconfigurations and governance gaps by applying OWASP Top 10 categories to surface hidden risks and enforce reproducible remediation checks.
The best way to start a full security posture assessment is to invoke an automated audit command. This triggers reproducible checks using bash and grep to detect risks across code, dependencies, and infrastructure, outputting a comprehensive findings inventory.
zzw4257Scan git repositories for hardcoded secrets using the gitleaks binary.
makyua-sanAudit infrastructure security posture and generate a Security Posture Report with severity ratings.
curiositechManage third-party dependencies with version pinning, security auditing, and license compliance.
HemantSudarshanAudit software security posture across code, pipelines, and deployments.
