Automate security posture assessments across infrastructure, code, and dependencies.
npx skills add https://github.com/curielmc/beat-SPY --skill cso-curielmc
Please help me install this Agent Skill. Skill: cso Source: https://github.com/curielmc/beat-SPY/tree/main/.claude/skills/gstack/cso Command: npx skills add https://github.com/curielmc/beat-SPY --skill cso-curielmc
Chief Security Officer mode provides infrastructure-first security audits, focusing on secrets archaeology, dependencies, CI/CD, LLM/AI security, and skill supply chain scanning to quickly identify and remediate risk across an organization.
Invoke the cso skill in daily mode to run an automated security audit and review findings.
High-intent search queries and answers about installing and using this skill.
A comprehensive security audit can be automated by scanning infrastructure, code, and dependency supply chains. This process uses an 8/10 confidence gate for routine daily checks and a 2/10 gate for monthly deep reviews to identify and remediate risks.
Threat modeling with OWASP alignment uses STRIDE-based coverage to actively verify security postures. It assesses infrastructure, code, and third-party dependencies to identify vulnerabilities and ensure comprehensive risk remediation across an organization.
Quick daily security scans use an 8/10 confidence gate for routine checks, while monthly deep audits use a 2/10 gate. Both modes assess infrastructure, code, dependency supply chains, and LLM/AI security to generate actionable governance reports.
Yes, this security audit approach explicitly covers LLM and AI security. It assesses infrastructure, code, and dependency supply chains, including skill supply chain scanning, to quickly identify and remediate risks specific to AI environments.
The gstack runtime supports automated security posture assessments by integrating Bash, Read, Grep, Glob, Write, Agent, WebSearch, and AskUserQuestion. These tools gather data, reason about findings, and prompt user decisions during the audit.
Secrets archaeology in infrastructure-first security audits involves actively scanning code and CI/CD pipelines to uncover hidden credentials. It focuses on quickly identifying and remediating these risks across an organization's infrastructure and dependencies.
muhammadhamad1104Audit infrastructure security with vulnerability scanning, dependency analysis, and threat modeling.
MolcajeteAIScan npm dependencies for vulnerabilities using npm audit, Snyk, and Socket.dev.
aporto-techExecute infrastructure security audits with OWASP Top 10 and STRIDE threat modeling.
moogieonAudit infrastructure security with Python scripts and external tools.
