Scan code, infrastructure, and dependencies for security risks and secrets.
npx skills add https://github.com/fghaffar/faystack --skill cso-fghaffar
Please help me install this Agent Skill. Skill: cso Source: https://github.com/fghaffar/faystack/tree/main/cso Command: npx skills add https://github.com/fghaffar/faystack --skill cso-fghaffar
Organizations need to identify hidden security risks, leaked credentials, supply‑chain vulnerabilities, and misconfigurations before attackers exploit them.
Ask the assistant to run /cso for a complete security posture report of the current repository.
High-intent search queries and answers about installing and using this skill.
To scan for exposed secrets in git history, you can run a security audit that performs secret archaeology across code, git history, and env files. This process identifies exposed keys and delivers findings with severity ratings and remediation steps.
Auditing CI/CD pipelines and dependencies for supply-chain vulnerabilities requires a comprehensive security scan across infrastructure and project files. The audit identifies misconfigurations and vulnerable packages, generating a structured security posture report.
You can run a quick daily security audit using a mode with an 8/10 confidence gate, designed for rapid checks. Alternatively, a deep monthly scan operates with a 2/10 confidence gate to find subtle risks across the repository.
The security audit includes OWASP checks to identify common web application flaws alongside vulnerable packages. It scans code and infrastructure to detect these issues, providing severity ratings and actionable remediation steps in the final report.
Running a full security posture report requires repository access and Git history to scan effectively. The audit utilizes Bash, Grep, and Claude tools, along with optional web search capabilities, to analyze code, infrastructure, and dependencies.
ManzuetiAudit software infrastructure for secrets, dependencies, CI/CD, and LLM security.
Marwan78888Identify security vulnerabilities in code, dependencies, and infrastructure.
cybersecwomanAnalyze package dependencies, CI/CD configurations, and artifacts for supply-chain vulnerabilities.
Logos-LiberIdentifies security vulnerabilities in code, dependencies, and container images.
