Scan repositories for security posture issues and generate audit reports.
npx skills add https://github.com/bhianerd/aimemory --skill cso-bhianerd
Please help me install this Agent Skill. Skill: cso Source: https://github.com/bhianerd/aimemory/tree/main/.claude/skills/gstack/cso Command: npx skills add https://github.com/bhianerd/aimemory --skill cso-bhianerd
It reduces security risk by producing a concrete, infrastructure-first audit report that identifies how attackers can break into systems through secrets, dependencies, CI/CD, and AI/LLM attack paths.
Ask for a daily security audit by running the command: /cso
High-intent search queries and answers about installing and using this skill.
Run an end-to-end security posture audit by executing /cso to scan your repository for secrets exposure, dependency supply-chain risk, CI/CD weaknesses, and AI/LLM vulnerabilities. It outputs a report with severity findings and remediation plans without changing code.
Infrastructure-first threat modeling maps attacker entry points through secrets, dependencies, and CI/CD pipelines before reviewing application code. It applies structured frameworks like STRIDE and OWASP Top 10 checks to identify credential leakage and pipeline misconfigurations with active verification.
Yes, the security audit covers AI and LLM-specific vulnerabilities alongside webhook and integration flaws. It identifies attack paths unique to AI systems and includes them in the posture report with severity ratings and concrete remediation plans.
Track security posture trends by running /cso for ongoing daily audits. It applies confidence-gated reporting across each run, allowing you to monitor dependency supply-chain risk and CI/CD weaknesses over time while maintaining strict mode behavior.
Yes, you can use it for pentest and OWASP assessments without modifying production code. The scanner operates in strict mode, outputting findings with severity levels and remediation plans while ensuring no code changes occur during the audit.
n-marusovAutomates security audits for vulnerabilities in the OWASP Top 10 via bash and npm scanning.
makyua-sanAudit infrastructure security posture and generate a Security Posture Report with severity ratings.
scanbottAutomate infrastructure-first security audits with secrets archaeology and dependency checks.
nhattran998Audits infrastructure and supply chain for secrets, dependency risks, misconfigurations, and vulnerabilities using threat modeling and scanning workflows.
