Audits project security including credentials, dependencies, CI/CD pipelines, and threat models.
npx skills add https://github.com/GrassHopper42/ANTidy --skill cso-grasshopper42
Please help me install this Agent Skill. Skill: cso Source: https://github.com/GrassHopper42/ANTidy/tree/main/.claude/skills/gstack/cso Command: npx skills add https://github.com/GrassHopper42/ANTidy --skill cso-grasshopper42
This Skill provides a comprehensive security audit and vulnerability scanning, helping identify and mitigate security risks in a project.
Run the cso skill to perform a security audit on your project.
High-intent search queries and answers about installing and using this skill.
A comprehensive security audit scans your project for leaked credentials, dependency vulnerabilities, CI/CD misconfigurations, and OWASP Top 10 risks. Running the audit identifies and mitigates security issues across your codebase and infrastructure.
STRIDE threat modeling identifies Spoofing, Tampering, Repudiation, Information Disclosure, Denial of Service, and Elevation of Privilege risks. It applies to vulnerability scanning by categorizing and assessing potential security threats within your software architecture.
Yes, you can check for leaked credentials and exposed secrets in your codebase. The security audit scans repository files, configurations, and CI/CD pipelines to detect hardcoded secrets, API keys, and sensitive data exposure.
Yes, the security audit covers LLM and AI integration vulnerabilities. It evaluates AI security risks, checks skill supply chains, and assesses data classification to protect machine learning models and AI integrations.
To run an OWASP Top 10 assessment and infrastructure shadow surface scan, you need a bash environment with file reading, grep, and write capabilities. The audit requires these tools to analyze dependencies, webhooks, and infrastructure configurations.
To scan dependencies and webhooks for security misconfigurations, run an automated vulnerability scan. This process identifies known vulnerabilities in package dependencies, audits webhook integrations, and detects exposed shadow infrastructure surfaces.
muhammadhamad1104Audit infrastructure security with vulnerability scanning, dependency analysis, and threat modeling.
AgentSecOpsGenerate STRIDE-based threat models and reports from Python code with pytm and Graphviz.
sajalsuhaneCatalog security risks across infrastructure, code, and third-party dependencies.
mohitmishra786Scan code, dependencies, containers, and cloud configurations for security vulnerabilities.
