skills.rest
DITEKmax
DITEKmaxCOMMUNITY
Explore all skills by this author →
GitHub

cso

Audit repository infrastructure for secrets, CI/CD misconfigurations, and supply-chain risks.

Updated Mar 28, 2026
Search Tags:#supply-chain#ci-cd#security-audit#repo-analysis#dependency-audit#llm-security#secrets-scanning
One-click install
npx skills add https://github.com/DITEKmax/rutcampustrack --skill cso-ditekmax
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: cso
Source: https://github.com/DITEKmax/rutcampustrack/tree/main/.claude/skills/cso
Command: npx skills add https://github.com/DITEKmax/rutcampustrack --skill cso-ditekmax

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Finds and prioritizes real security weaknesses across code, infrastructure, CI/CD, dependencies, and AI/skill supply chains so teams stop chasing noisy false positives and focus on exploitable issues and actionable remediation.

Core Features & Use Cases

  • Architecture-first scanning: Detects stack and framework, then prioritizes checks for secrets, CI leaks, exposed credentials, stale infrastructure, and misconfigured services.
  • Dependency and supply-chain analysis: Flags vulnerable or malicious dependencies, supply-chain risks in CI/CD, and dependency provenance issues.
  • Agent and LLM risk checks: Inspects skill supply chains, prompt/tool usage, and telemetry patterns for potential prompt injection or data leakage.
  • Modes and scope: Supports daily (noisy-minimized) and comprehensive deep scans, infra-only, code-only, skills-only, and diff-based branch scans that limit checks to changed files.
  • Output: Produces a Security Posture Report with findings, severity, reproducible evidence, and prioritized remediation steps.

Quick Start

Run /cso to perform a daily infrastructure-first security audit of the repository and generate a Security Posture Report with prioritized findings and remediation steps.

Frequently Asked Questions about cso

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan a repository for CI/CD misconfigurations and exposed secrets?▼

Run a security audit on the repository to detect exposed credentials, CI/CD misconfigurations, and dependency supply-chain risks. It analyzes git history and pipeline configurations, outputting a Security Posture Report with reproducible evidence and remediation steps.

What is dependency supply-chain risk analysis in a codebase?▼

Dependency supply-chain risk analysis identifies vulnerable or malicious dependencies, CI/CD provenance issues, and LLM/agent vulnerabilities across microservice codebases and skill supply chains to prioritize exploitable issues over noisy false positives.

Can I run a security audit only on changed files in a branch?▼

Yes, targeted diff-based branch scans limit security checks to changed files only. The audit also supports daily noised-minimized scans, comprehensive deep scans, infra-only, code-only, and skills-only modes to fit different review scopes.

Does this security audit check for LLM and prompt injection vulnerabilities?▼

Yes, the audit inspects skill supply chains, prompt usage, tool integrations, and telemetry patterns to detect potential LLM prompt injection or data leakage vulnerabilities within your agent infrastructure.

What is the best way to audit Telegram mini-app integrations for security risks?▼

Run an infrastructure-first security audit tailored to Telegram and mini-app integrations. It detects framework misconfigurations, exposed credentials, and dependency risks, producing a consolidated Security Posture Report with actionable remediation steps.

Related Skills

Explore More Software Engineering Skills→
ejoongseokejoongseok
8

security-diagnosis

Scan repositories for security and compliance weaknesses with prioritized findings.

Community
Advanced
2460124601

cso

Audit repositories, CI/CD pipelines, and dependency supply chains for security issues.

Community
Advanced
BagelHoleBagelHole
46

model-supply-chain-security

Sign AI model artifacts and attest provenance for supply chain security.

Community
Advanced
ArianHobson333ArianHobson333
7

source-code-scanning

Automate source code security scanning for vulnerabilities, CVEs, and hardcoded secrets.

Community
Advanced