Audit infrastructure, dependencies, CI/CD, and LLM security with trend tracking.
npx skills add https://github.com/DariusCorvus/iqualize --skill cso-dariuscorvus
Please help me install this Agent Skill. Skill: cso Source: https://github.com/DariusCorvus/iqualize/tree/main/.claude/skills/gstack/cso Command: npx skills add https://github.com/DariusCorvus/iqualize --skill cso-dariuscorvus
Infrastructure and operations teams often struggle to assess and improve security posture across complex software systems. This CSO-oriented skill provides an end-to-end security audit workflow covering infrastructure, pipelines, dependencies, and AI/LLM risk to surface vulnerabilities and guide remediation.
Run the CSO audit workflow to generate a comprehensive security posture report.
High-intent search queries and answers about installing and using this skill.
A CI/CD pipeline security audit uses automated checks via Bash, Grep, and Read to detect vulnerabilities and gather evidence across your software delivery workflows. It assesses secrets archaeology, dependency supply chains, and pipeline configurations.
Secrets archaeology in infrastructure security is the active scanning of codebases to unearth exposed credentials. It uses tools like Glob and Grep to identify hardcoded secrets and guide remediation planning to close access gaps.
Yes, this security audit covers LLM and AI vulnerabilities by evaluating AI-specific attack surfaces alongside traditional infrastructure. It integrates LLM security checks into the overall posture assessment to surface risks in AI-integrated systems.
Yes, you can use STRIDE threat modeling to systematically identify threats during a dependency supply chain review. This approach structures active verification and remediation governance to reduce risk across daily and monthly tracking.
The best way to track security posture improvements is through active verification with trend tracking across daily and monthly scans. This generates comprehensive posture reports to monitor remediation governance and risk reduction over time.
olaafrossiAudit infrastructure security posture across secrets, dependencies, CI/CD, and LLM/AI.
michaelalberReview .NET applications for OWASP Top 10 vulnerabilities and Telerik CVEs.
jayzalowitzAudit infrastructure, dependencies, and AI workflows for security weaknesses.
HouseGarofaloScan container images, dependencies, and IaC for security vulnerabilities.
