Audit code, CI/CD, dependencies, and cloud infrastructure for exposed secrets and supply-chain threats.
npx skills add https://github.com/ibalasite/gstack --skill cso-ibalasite
Please help me install this Agent Skill. Skill: cso Source: https://github.com/ibalasite/gstack/tree/main/cso Command: npx skills add https://github.com/ibalasite/gstack --skill cso-ibalasite
Many codebases and pipelines expose secrets, risky CI/CD workflows, vulnerable dependencies, or misconfigured infrastructure that attackers can exploit; manual audits are slow and noisy. cso provides a focused, confidence-gated audit workflow that finds high-signal issues across git history, dependencies, CI, and infrastructure so teams can fix the real doors that are open.
Run the cso skill to perform an infrastructure-first security audit and generate a Security Posture Report with prioritized findings and remediation steps.
High-intent search queries and answers about installing and using this skill.
You can perform a security audit on repositories and branches using daily zero-noise audits, comprehensive monthly deep scans, scoped inspections (infra, code, skills, supply-chain), and diff-limited branch checks. This confidence-gated workflow finds high-signal issues across git history, dependencies, CI, and infrastructure.
Dependency and supply-chain analysis detects missing lockfiles, install scripts in production dependencies, and known CVEs. By checking dependency lockfiles and install scripts, the audit identifies vulnerable components and supply-chain threats within your codebase.
The audit produces a Security Posture Report with prioritized findings, severity ratings, and remediation steps. This confidence-gated reporting ensures teams receive zero-noise results during daily audits and comprehensive details during monthly deep scans.
The confidence-gated reporting workflow uses daily zero-noise audits and comprehensive monthly deep scans to filter out false positives. This approach ensures you only receive prioritized findings with severity ratings and remediation steps for actual exposed secrets and risky workflows.
tnkmr32Generate project READMEs with overview, installation, usage, and contribution sections.
makyua-sanAudit infrastructure security posture and generate a Security Posture Report with severity ratings.
fatihkanDetect security misconfigurations in Infrastructure-as-Code files across Dockerfiles, Kubernetes, Terraform, and CI workflows.
TumeloRamaphosaAudits source code, dependencies, CI/CD pipelines, and AI/LLM attack surfaces for security.
