Audit infrastructure, dependencies, and AI workflows for security weaknesses.
npx skills add https://github.com/jayzalowitz/skytwin --skill cso-jayzalowitz
Please help me install this Agent Skill. Skill: cso Source: https://github.com/jayzalowitz/skytwin/tree/main/.claude/skills/gstack/cso Command: npx skills add https://github.com/jayzalowitz/skytwin --skill cso-jayzalowitz
Infrastructure-first security audit that reveals secrets, supply chain risks, and insecure configurations across CI/CD and LLM workflows.
Run the daily cso audit to perform an infrastructure-wide security posture check including secrets archaeology and supply-chain review.
High-intent search queries and answers about installing and using this skill.
Infrastructure security audits surface leaked secrets and supply chain risks by scanning dependencies and CI/CD workflows. This skill performs secrets archaeology and dependency analysis to reveal insecure configurations across your infrastructure.
Checking LLM and AI workflow security posture involves scanning skill supply chains and validating configurations. This audit performs LLM security analysis and skill supply chain scanning to surface weaknesses in your AI workflows.
STRIDE threat modeling integrates with OWASP Top 10 checks by evaluating infrastructure threats alongside web vulnerability categories. The audit applies both frameworks during active verification to validate security findings.
Daily security audits can run with zero-noise gating at an 8/10 confidence threshold to minimize false positives. This mode performs infrastructure-wide checks including secrets archaeology and supply-chain review.
A comprehensive monthly deep scan is needed for thorough vulnerability validation using a 2/10 confidence barrier, unlike daily audits. It tracks security posture trends across runs while actively verifying comprehensive findings.
The audit actively verifies security weaknesses rather than just reporting static analysis findings. It uses active verification across both daily and comprehensive monthly runs to validate discovered threats and configuration issues.
cegit27Audit infrastructure security across secrets, dependencies, CI/CD, and LLM/AI.
MolcajeteAIScan npm dependencies for vulnerabilities using npm audit, Snyk, and Socket.dev.
sadie100Audit infrastructure, applications, and development processes for security vulnerabilities.
devendrapratapsinghScan application code for vulnerabilities and hardcoded secrets.
