Identify security posture risks across infrastructure, dependencies, and workflows.
npx skills add https://github.com/deveshkumars/Intentra --skill cso-deveshkumars
Please help me install this Agent Skill. Skill: cso Source: https://github.com/deveshkumars/Intentra/tree/main/cso Command: npx skills add https://github.com/deveshkumars/Intentra --skill cso-deveshkumars
Infrastructure teams often risk security gaps across the build, deployment, and supply chain; this Skill provides a structured audit approach that surfaces secrets, supply chain flaws, and misconfigurations.
Activate the cso audit by running /cso for a daily check or /cso --comprehensive for a deep monthly scan.
High-intent search queries and answers about installing and using this skill.
Run an infrastructure security audit by executing /cso for daily gatekeeping checks or /cso --comprehensive for monthly deep scans. The audit covers surface mapping, secrets archaeology, supply chain checks, and OWASP/STRIDE threat modeling to produce actionable findings with remediation plans.
Secrets archaeology is the process of scanning repositories and configurations to locate exposed credentials. This security audit technique surfaces hidden secrets across your infrastructure, dependencies, and workflows to help teams harden their systems against unauthorized access.
Yes, you can apply OWASP Top 10 and STRIDE threat modeling with active verification during your security audit. The process identifies security posture risks across infrastructure and workflows, producing actionable findings with specific remediation plans to harden systems.
Yes, dependency supply chain scanning checks for vulnerable packages and compromised chains. The audit monitors internal tools, third-party components, and infrastructure dependencies to surface supply chain flaws and track risk over time through daily quick checks or monthly deep scans.
Automate daily security gatekeeping by running /cso to perform quick checks on infrastructure, CI/CD pipelines, and dependencies. This prevents insecure deployments by catching secrets, misconfigurations, and supply chain flaws early in the build process.
Yes, LLM and AI security checks are included to guard prompts, data handling, and tool usage. The audit assesses these risks alongside infrastructure, dependencies, and CI/CD workflows to help teams harden their entire system posture.
VertaKhanRun infrastructure-first security audits and generate a Security Posture Report.
CarbeneAIAudit codebases for leaked secrets, CI/CD misconfigurations, and vulnerable dependencies.
martinholovskyApply OWASP Top 10 2025 and STRIDE threat modeling to secure SDLCs.
zhifengzhang-szAudit infrastructure security posture across secrets, supply chain, CI/CD, and AI/LLM.
