Audit infrastructure security gaps across secrets, dependencies, CI/CD, and LLM/AI.
npx skills add https://github.com/howdeploy/NekoFree --skill cso-howdeploy
Please help me install this Agent Skill. Skill: cso Source: https://github.com/howdeploy/NekoFree/tree/main/skills/cso Command: npx skills add https://github.com/howdeploy/NekoFree --skill cso-howdeploy
Infrastructure-first security audits that surface secrets, dependency risks, and configuration weaknesses across CI/CD pipelines, AI integrations, and supply chains.
Run a daily security audit for your project to identify secrets, dependency risks, and OWASP threats.
High-intent search queries and answers about installing and using this skill.
An infrastructure security audit identifies leaked credentials and vulnerable dependencies by performing deterministic checks across repositories and CI/CD pipelines. The Skill uncovers secrets archaeology and supply chain risks, producing actionable reports for immediate remediation.
OWASP and STRIDE analysis map threats and verify mitigations across your infrastructure stack during CI/CD pipeline security checks. The Skill supports daily zero-noise scans and monthly comprehensive audits to track security posture trends across runs.
Secrets archaeology finds leaked keys and credentials by scanning repositories and pipelines using Bash, Grep, and Glob tools. This process surfaces hidden authentication tokens and configuration weaknesses, enabling proactive remediation before exploitation.
LLM and AI security checks are supported as part of the comprehensive infrastructure security posture audit. The Skill identifies configuration weaknesses and vulnerabilities specific to AI integrations, ensuring threats are mapped and mitigated across the stack.
Daily zero-noise security scans perform deterministic checks to identify infrastructure security gaps without alert fatigue. The Skill uses a defined toolset including Bash, Read, Grep, and Glob to execute precise vulnerability detection and generate actionable reports.
Automated threat modeling and supply chain security scans require a defined toolset of Bash, Read, Grep, Glob, Write, Agent, WebSearch, and AskUserQuestion. These tools perform deterministic checks to identify vulnerable transitive dependencies and compromised components.
sobhanashineAudit infrastructure and applications for vulnerabilities and OWASP compliance.
louisfghbvcIdentify and report security posture risks across infrastructure, secrets, and dependencies.
westnMonitor security posture across infrastructure, code, and third-party risk.
AlexandreLabIdentify and report security posture issues across infrastructure, CI/CD pipelines, and dependency supply chains.
