Identify secrets, supply-chain risks, and deployment vulnerabilities in AI-driven infrastructure.
npx skills add https://github.com/diiviikk5/rezops --skill cso-diiviikk5
Please help me install this Agent Skill. Skill: cso Source: https://github.com/diiviikk5/rezops/tree/main/cso Command: npx skills add https://github.com/diiviikk5/rezops --skill cso-diiviikk5
This skill guides security-focused audits of AI-driven infrastructure, helping teams identify secrets, supply-chain risks, and deployment vulnerabilities across CI/CD pipelines.
Run a CSO-mode security audit on the current project to begin the assessment.
High-intent search queries and answers about installing and using this skill.
To scan CI/CD pipelines for leaked secrets and supply-chain risks, run a CSO-mode security audit. It inventories embedded credentials, detects vulnerable transitive dependencies, and assesses deployment security practices across your projects.
Threat modeling with OWASP alignment maps deployment vulnerabilities and security threats directly to the OWASP Top 10. It helps teams identify risks in AI-driven infrastructure and structure remediation efforts during security audits.
Yes, you can run security audits on projects of any size without excessive noise by using daily zero-noise scans. This mode enforces high-signal reporting to avoid alert fatigue while continuously monitoring infrastructure.
To switch between daily quick scans and monthly deep security audits, toggle the active verification modes in the audit configuration. Monthly deep scans generate structured reports for comprehensive risk assessment and secrets archaeology.
The best way to assess dependency supply chain risks is performing an infra-first security audit. It actively verifies components to detect risky dependencies and vulnerable transitive packages within your CI/CD deployment pipeline.
luisgustavooliveiraAutomate infrastructure security audits using OWASP Top 10 and STRIDE threat modeling.
lookatitudeScan dependencies for CVEs and license risks, then output an audit-report.md and patch plan.
MissTullyAudit codebases for secrets, supply-chain, CI/CD, and AI security risks.
AI-SafeterAudit code, CI/CD pipelines, and deployments for DevSecOps security gaps.
