Identify security gaps across secrets, dependencies, CI/CD, and AI systems.
npx skills add https://github.com/gfires/motion-analysis --skill cso-gfires
Please help me install this Agent Skill. Skill: cso Source: https://github.com/gfires/motion-analysis/tree/main/cso Command: npx skills add https://github.com/gfires/motion-analysis --skill cso-gfires
Infrastructure-first security audits that identify secrets exposure, supply-chain risks, CI/CD weaknesses, and AI/LLM security gaps, delivering concrete remediation plans to harden the environment.
Invoke /cso to run a daily security posture audit and generate a Security Posture Report for your organization.
High-intent search queries and answers about installing and using this skill.
Conducting a security posture audit scans secrets, dependencies, CI/CD pipelines, and AI systems to uncover exposed credentials, verify third-party components, and assess pipeline integrity, producing a prioritized Security Posture Report with concrete remediation steps.
STRIDE threat modeling is a structured framework for identifying security threats across modern software stacks and cloud deployments. You need it to quantify security posture gaps, enable vulnerability discovery, and produce action-oriented defenses adhering to OWASP Top 10.
Auditing LLM and AI systems for prompt-injection risks involves evaluating model exposure, tool-call permissions, and AI security gaps. This Skill detects prompt-injection vulnerabilities and includes them in a Security Posture Report with severity ratings.
The security audit supports both daily automated checks and comprehensive reviews. It operates in a daily mode with an 8/10 confidence gate for quick checks and a comprehensive mode with a 2/10 bar for deep infrastructure security audits.
The best way to generate a prioritized remediation plan is to run a security posture audit across secrets, dependencies, CI/CD, and AI systems. The Skill applies active verification and outputs a Security Posture Report with severity ratings and concrete fixes.
Yes, you can use this to scan your automation skills ecosystem. The Skill includes supply chain scanning capabilities to evaluate the security of the automation skills ecosystem and dependencies, detecting risky transitive dependencies.
cegit27Audit infrastructure security across secrets, dependencies, CI/CD, and LLM/AI.
drt0927Automate security posture audits across code, dependencies, CI/CD pipelines, and infrastructure.
VSF-QC-TTSAudits AI applications for OWASP LLM Top 10 security risks.
Logos-LiberIdentifies security vulnerabilities in code, dependencies, and container images.
