Audit infrastructure and supply-chain security for secrets exposure and misconfigurations.
npx skills add https://github.com/anishs1207/agentic-cli --skill cso-anishs1207
Please help me install this Agent Skill. Skill: cso Source: https://github.com/anishs1207/agentic-cli/tree/main/.agents/skills/gstack-cso Command: npx skills add https://github.com/anishs1207/agentic-cli --skill cso-anishs1207
Infrastructure-first security audits to identify secrets leakage, supply-chain risks, and misconfigurations across CI/CD and development lifecycles.
Run a comprehensive CSO audit on the current project focusing on infrastructure, secrets, supply chain, and threat modeling to reveal actionable findings.
High-intent search queries and answers about installing and using this skill.
A security audit for CI/CD pipelines identifies secrets exposure, vulnerable configurations, and supply-chain risks using deterministic workflows. It performs infrastructure-first checks across dependency graphs and development lifecycles to uncover actionable threat model findings.
Secrets archaeology in infrastructure security auditing is the process of uncovering leaked credentials within codebases and CI/CD configurations. It systematically scans dependency graphs and development lifecycles to identify exposed secrets before they can be exploited.
Yes, threat modeling supports OWASP Top 10 and STRIDE scenarios for infrastructure security checks. It applies these frameworks to CI/CD pipelines and AI tooling to generate actionable remediation guidance and track security posture trends.
Yes, infrastructure security auditing supports both daily zero-noise quick checks and comprehensive monthly scans. Each mode uses distinct confidence gates to track security posture trends and provide actionable remediation guidance across audit runs.
Auditing LLM and AI tooling security controls requires infrastructure-first security auditing that targets AI configurations and active verification. It identifies misconfigurations and supply-chain risks specific to AI tooling within development lifecycles.
Identifying supply-chain risks in dependency graphs involves performing comprehensive security audits that analyze CI/CD pipelines and infrastructure configurations. It uncovers vulnerable dependencies and misconfigurations to provide actionable remediation guidance.
ManzuetiAudit software infrastructure for secrets, dependencies, CI/CD, and LLM security.
storyclaw-officialAudit OpenClaw gateway hosts for security vulnerabilities and generate OK/VULNERABLE reports.
cegit27Audit infrastructure security across secrets, dependencies, CI/CD, and LLM/AI.
bugrabilgeDetect security vulnerabilities in code, running apps, and dependencies.
