Audit infrastructure, dependencies, CI/CD, and AI risk with OWASP Top 10 and STRIDE.
npx skills add https://github.com/I194/PMTools_2.0 --skill cso-i194
Please help me install this Agent Skill. Skill: cso Source: https://github.com/I194/PMTools_2.0/tree/main/.claude/skills/gstack/cso Command: npx skills add https://github.com/I194/PMTools_2.0 --skill cso-i194
Chief Security Officer mode. Infrastructure-first security audit: secrets archaeology, dependency supply chain, CI/CD pipeline security, LLM/AI security, skill supply chain scanning, plus OWASP Top 10, STRIDE threat modeling, and active verification.
Invoke the /cso audit to start a daily zero-noise security review.
High-intent search queries and answers about installing and using this skill.
An infrastructure-first security audit assesses secrets, dependency supply chains, CI/CD pipelines, and LLM/AI risks. It applies OWASP Top 10, STRIDE threat modeling, and active verification to catch threats across your software project.
Daily zero-noise security scans operate at an 8/10 confidence threshold to surface only high-priority threats, while comprehensive monthly scans perform deep audits with trend tracking to monitor security posture improvements over time.
Yes, STRIDE threat modeling and OWASP Top 10 checks are integrated into the security audit. They support pentest preparation, security reviews, and supply-chain assessments by actively verifying vulnerabilities.
Yes, supply-chain scanning includes secrets archaeology to find exposed credentials and LLM/AI security to evaluate model risks. It scans skill supply chains and dependencies to ensure DevSecOps coverage across all project components.
The best way to start a zero-noise security review is to invoke the daily audit command within the required gstack CSO workflow. This initiates an infrastructure-first scan targeting high-confidence threats without alert fatigue.
tan-yong-shengAudit dependencies, configurations, and infrastructure for security weaknesses and generate remediation plans.
shhubbhAudit security posture across infrastructure, dependencies, and CI/CD pipelines.
sadie100Audit infrastructure, applications, and development processes for security vulnerabilities.
nimeshgurungAutomate threat modeling, security auditing, and penetration testing.
