Audit codebases for secrets, dependencies, CI/CD, and OWASP Top 10.
npx skills add https://github.com/ericdahl-dev/coauthor-cleaner --skill cso-ericdahl-dev
Please help me install this Agent Skill. Skill: cso Source: https://github.com/ericdahl-dev/coauthor-cleaner/tree/main/.claude/skills/gstack/cso Command: npx skills add https://github.com/ericdahl-dev/coauthor-cleaner --skill cso-ericdahl-dev
This Skill provides a comprehensive security audit, addressing infrastructure-first security, secrets archaeology, dependency supply chain, CI/CD pipeline security, LLM/AI security, skill supply chain scanning, OWASP Top 10, STRIDE threat modeling, and data classification.
Run the cso skill to perform a security audit on your current project.
High-intent search queries and answers about installing and using this skill.
A comprehensive security audit scans your codebase for leaked secrets, dependency vulnerabilities, and CI/CD pipeline issues. It also assesses OWASP Top 10 risks, STRIDE threat models, and LLM-specific vulnerabilities to provide a detailed security posture report.
Secrets archaeology in vulnerability scanning detects and reports leaked credentials hidden within your codebase history. It identifies exposed API keys and passwords to prevent unauthorized access before deploying your project.
Yes, you can check dependency supply chain security and CI/CD pipelines to identify vulnerabilities in external packages and inspect workflows for security issues. This ensures your continuous integration processes remain protected against supply chain attacks.
Yes, the security audit requires a repository with a .git directory and the necessary tooling installed. This git history is required to perform accurate secrets archaeology and comprehensive vulnerability scanning.
LLM security scanning audits your project for AI-specific vulnerabilities and assesses skill supply chain risks. It identifies unique threats introduced by integrating large language models and AI components into your software architecture.
Automating STRIDE threat modeling and data classification involves running a security audit script across your project. This process identifies potential threats and categorizes data sensitivity to generate a structured security review report.
sdk451Initialize a Git repository with an initial commit in Bash or PowerShell.
nksethIdentify security vulnerabilities in code and infrastructure and deliver prioritized audit reports with remediation guidance.
martinholovskyAutomate CI/CD pipeline security hardening with GitHub Actions.
matteocervelliScan codebases for secrets, vulnerable dependencies, and insecure patterns.
