Audit infrastructure, dependencies, CI/CD, and AI workflows for security weaknesses.
npx skills add https://github.com/huichen/gstack --skill cso-huichen
Please help me install this Agent Skill. Skill: cso Source: https://github.com/huichen/gstack/tree/main/cso Command: npx skills add https://github.com/huichen/gstack --skill cso-huichen
Infrastructure and software supply chain pose real security risk; this Skill provides a structured Chief Security Officer level audit covering secrets archaeology, dependency supply chain, CI/CD security, LLM/AI security, skill supply chain scanning, and standard threat modeling like OWASP Top 10 and STRIDE.
Run the cso daily audit to begin a security posture review across infra, code, and dependencies.
High-intent search queries and answers about installing and using this skill.
A comprehensive security audit reviews your dependencies, CI/CD pipelines, and code paths to identify weaknesses. It applies OWASP Top 10, STRIDE threat modeling, and secrets scanning to deliver a prioritized remediation plan with concrete steps and risk ratings.
STRIDE threat modeling identifies threats like spoofing, tampering, and denial of service across system components. Applied to CI/CD security, it maps threats to pipeline stages and deployment tooling, producing structured risk ratings and remediation guidance for developers and operators.
Supply chain risk scanning identifies leaked credentials, stale keys, and risky third-party components by analyzing your dependency graph and infrastructure. It flags vulnerable packages and secrets archaeology, mapping findings to industry best practices for immediate remediation.
Yes, the security audit covers LLM and AI workflows, including skill supply chain scanning. It evaluates AI/LLM security postures alongside infrastructure and standard code paths to identify weaknesses and generate concrete remediation steps.
Yes, infrastructure-first security audits run structured checks across environments, pipelines, and deployment tooling. They apply OWASP Top 10 mappings to identify vulnerabilities and generate a prioritized remediation plan with risk ratings.
Daily mode provides continuous, structured checks across environments and pipelines for ongoing security posture review. Comprehensive mode applies full STRIDE threat modeling, OWASP Top 10 mappings, and deep secrets archaeology to deliver a complete prioritized remediation plan.
cegit27Audit infrastructure security across secrets, dependencies, CI/CD, and LLM/AI.
Clear-CapabilitiesRotate leaked API keys and credentials end-to-end across supported providers.
phatblatAutomate web application security assessments with reconnaissance, threat modeling, and vulnerability analysis.
saeed-vayghanIdentify and validate security weaknesses in web applications, networks, and APIs.
