Identify and catalog security weaknesses across infrastructure, dependencies, and CI/CD pipelines.
npx skills add https://github.com/CaltexBevo/ihe-pulse --skill cso-caltexbevo
Please help me install this Agent Skill. Skill: cso Source: https://github.com/CaltexBevo/ihe-pulse/tree/main/.claude/skills/gstack.bak/cso Command: npx skills add https://github.com/CaltexBevo/ihe-pulse --skill cso-caltexbevo
Helps security teams build a repeatable, infrastructure-first audit program that surfaces secrets, supply chain risks, CI/CD weaknesses, and LLM/AI security gaps before they become incidents.
Run a daily CSO audit to surface security posture findings and generate an actionable Security Posture Report.
High-intent search queries and answers about installing and using this skill.
To audit infrastructure for exposed secrets and CI/CD misconfigurations, run a security posture check that scans code, configurations, and build pipelines to surface weak credentials and deploy tooling risks, then generates actionable remediation steps.
The best way to apply OWASP Top 10 and STRIDE threat modeling is running automated daily posture checks that standardize risk rankings across infrastructure, dependencies, and pipelines, yielding verifiable, evidence-backed security findings.
Yes, you can scan your software supply chain to identify vulnerable, outdated components and risky transitive dependencies, which allows your security team to catalog supply chain risks before they escalate into incidents.
To evaluate LLM security and prevent prompt-injection, you assess prompt safety, data handling, and model interactions within your AI applications, producing actionable findings that prevent data leaks and malicious model manipulations.
Yes, this security audit approach provides verifiable evidence for compliance by generating evidence-backed remediation steps and verification checks across daily posture audits and monthly deep reviews of infrastructure and dependencies.
You should run daily security posture checks for routine identification of infrastructure weaknesses and exposed secrets, while scheduling monthly deep audits for comprehensive OWASP Top 10, threat modeling, and LLM security evaluations.
yusufcmgGenerate GitLab CI/CD pipeline configurations with multi-stage workflows and Docker builds.
erenisiklarDetect 11 vulnerability patterns in Algorand TEAL/PyTeal smart contracts.
icartshAnalyze .NET solutions for code quality, security, and dependency issues.
gabriellpequenoPlan authorized red-team exercises with defined scope and documentation.
