Audit code, dependencies, CI/CD, and infrastructure to generate a Security Posture Report.
npx skills add https://github.com/dogeared/tnra --skill cso-dogeared
Please help me install this Agent Skill. Skill: cso Source: https://github.com/dogeared/tnra/tree/main/.claude/skills/gstack/cso Command: npx skills add https://github.com/dogeared/tnra --skill cso-dogeared
In real-world software, the biggest risks sit in dependencies, secrets, and CI/CD pipelines. Teams often assume code is safe, leaving open attack surfaces that attackers exploit through leaked credentials, insecure configurations, and insecure supply chains. This skill provides a security posture report framework to expose those gaps and guide remediation for stakeholders.
Run the /cso command to start a daily security audit and generate a Security Posture Report for your team.
High-intent search queries and answers about installing and using this skill.
Run an end-to-end security audit to identify posture gaps across code, dependencies, CI/CD, and infrastructure. The process generates a structured Security Posture Report with risk severities, remediation steps, and traceable evidence across phases 0-14.
Secrets archaeology uncovers leaked keys, tokens, and sensitive configurations hidden in repositories and builds. It improves supply chain security by exposing open attack surfaces and providing concrete remediation steps to secure your dependencies.
Yes, you can use threat modeling guidance with OWASP Top 10 and STRIDE frameworks to validate controls. It assesses infrastructure risk across GitHub workflows, container images, IaC, and production runbooks through active verification.
Yes, the security audit supports repeatable daily and comprehensive monthly cycles. It produces a Security Posture Report with traceable evidence and risk severities, and supports optional scope flags and integration with gstack telemetry.
The best way to remediate security posture gaps is conducting an infra-first security audit across container images and IaC. It cuts through the noise to provide concrete remediation steps and governance signals for your supply chain.
shakhovskiya-createAudit CI/CD pipelines and infrastructure configurations for security and reliability.
dy9759Identify and remediate security vulnerabilities across IT infrastructure and applications.
dy9759Design CI/CD pipelines and cloud-native infrastructure with Terraform and Kubernetes.
HouseGarofaloScan container images, dependencies, and IaC for security vulnerabilities.
