Audit codebase security across infrastructure, dependencies, CI/CD, and AI tooling.
npx skills add https://github.com/forbotsake/forbotsake --skill cso-forbotsake
Please help me install this Agent Skill. Skill: cso Source: https://github.com/forbotsake/forbotsake/tree/main/.claude/skills/gstack/cso Command: npx skills add https://github.com/forbotsake/forbotsake --skill cso-forbotsake
Infrastructure-first security audit to surface weaknesses across your stack, from secrets in the codebase to insecure CI/CD pipelines and risky AI tooling.
Run a daily audit with /cso to start the security posture review.
High-intent search queries and answers about installing and using this skill.
To audit your codebase for security vulnerabilities, this Skill scans infrastructure, dependencies, CI/CD pipelines, and AI tooling to surface risks. It performs secrets archaeology and supply-chain scanning to generate a Security Posture Report with remediation steps.
STRIDE threat modeling and OWASP Top 10 scanning are security frameworks applied here to identify architectural and implementation risks. This Skill uses them alongside infrastructure checks to comprehensively evaluate your security posture and highlight areas needing risk reduction.
Checking for exposed secrets and risky dependencies involves scanning the codebase and OSS supply chain. This Skill performs secrets archaeology and dependency supply chain analysis to actively verify risks and track security trends across audit runs.
Yes, you can run a daily lightweight security check for LLM and AI tooling risks. The Skill supports daily lightweight checks or monthly deep scans to monitor pipelines, secrets, and AI security, producing a Security Posture Report.
No external dependencies are required to run this security audit. The Skill implements a multi-phase workflow using built-in tools like Bash, Read, Grep, and WebSearch to actively verify risks and produce remediation steps without external setup.
The best way to track security posture improvement is through trend tracking across audit runs. This Skill records results from daily checks and monthly deep scans, allowing you to monitor risk reduction and verify compliance over time.
muhammadhamad1104Audit infrastructure security with vulnerability scanning, dependency analysis, and threat modeling.
drt0927Automate security posture audits across code, dependencies, CI/CD pipelines, and infrastructure.
cegit27Audit infrastructure security across secrets, dependencies, CI/CD, and LLM/AI.
SergeiGolosDetect and prioritize security vulnerabilities across dependencies, secrets, code patterns, and configurations.
