Audit repository security posture and surface high-confidence risks.
npx skills add https://github.com/GenEducation/GenedUIProject --skill cso-geneducation
Please help me install this Agent Skill. Skill: cso Source: https://github.com/GenEducation/GenedUIProject/tree/main/.gemini/skills/cso Command: npx skills add https://github.com/GenEducation/GenedUIProject --skill cso-geneducation
cso turns a broad security review into a concrete audit plan, so teams can find the real risks hiding in code, dependencies, CI/CD, secrets, and AI integrations before they become incidents.
Ask the AI to run the cso security audit on this repository and return the highest-confidence findings with exact remediation steps.
High-intent search queries and answers about installing and using this skill.
To audit your application codebase, run a security posture review that detects your stack and inspects code, CI/CD, secrets, and AI integrations. This process surfaces high-confidence risks with severity levels and concrete remediation guidance.
Security posture auditing assesses a repository to find real risks hiding in code, dependencies, and infrastructure. It uses stack-aware detection and active verification to produce a structured report with severity, confidence, and remediation guidance.
Yes, you can audit infrastructure and CI/CD configurations in a Next.js repository. The audit applies stack-aware detection to focus on the highest-risk areas, including dependencies, unsafe webhooks, and insecure auth flows.
You can review your repository for skill supply chain risks and risky package updates by running an audit that applies active verification and evidence-based checks. It performs repeated pattern searches across phases to catch risky updates before shipping.
Yes, the security audit report provides confidence levels for threat modeling findings. It uses confidence gating during code inspection to ensure the report only surfaces high-confidence risks with exact remediation steps rather than vague advice.
kagentiScan project dependencies and source code for CVEs using Trivy.
FlorianBruniauxDetect fail-open insecure defaults in code and configuration flows.
VanLAutomate security audits and threat verification across infrastructure, code, and AI systems.
voidrotConfigure SAST tools like Semgrep, CodeQL, and SonarQube for CI/CD pipelines.
