Audit infrastructure, dependencies, and AI tooling with a 14-phase security workflow.
npx skills add https://github.com/Jesse-L-M/scz-target-engine --skill cso-jesse-l-m
Please help me install this Agent Skill. Skill: cso Source: https://github.com/Jesse-L-M/scz-target-engine/tree/main/.claude/skills/gstack/cso Command: npx skills add https://github.com/Jesse-L-M/scz-target-engine --skill cso-jesse-l-m
Security posture of software projects is often lax and incomplete. You need a repeatable, CSO-grade audit that uncovers secrets, supply-chain risks, and insecure configurations across infrastructure, code, and third-party dependencies.
Tell Claude to run /cso to start a daily CSO-grade security audit.
High-intent search queries and answers about installing and using this skill.
Run a comprehensive security audit by executing a 14-phase workflow that scans infrastructure, dependencies, and AI tooling. This process uncovers secrets, evaluates supply-chain risks, and applies threat modeling using OWASP Top 10 and STRIDE analysis.
Secrets archaeology is the process of scanning code and configurations during a security audit to uncover exposed credentials. It hardens your CI/CD pipeline by detecting vulnerable components and risky transitive dependencies across your infrastructure.
You can perform daily quick security scans using an 8/10 gate threshold, or run comprehensive monthly deep audits with a stricter 2/10 bar. Both modes use the same guided, repeatable 14-phase process to verify your security posture.
Yes, the threat modeling approach explicitly covers OWASP Top 10 and STRIDE analysis. It actively verifies risks across your code and infrastructure, providing specific remediation guidance to harden your software security posture.
No external dependencies are required to start scanning supply-chain risks. The audit supports tool-based checks guided by frontmatter configuration to detect vulnerable components and risky transitive dependencies natively.
The best way to harden platform security configurations is through a CSO-grade audit framework. It systematically evaluates insecure configurations across infrastructure, code, and third-party dependencies to provide targeted remediation guidance.
akiyoshiAudit security posture across dependencies, configurations, and CI/CD pipelines.
nahisahoAudit code, configurations, and dependencies for security vulnerabilities.
kinnerkarmanishDetect vulnerabilities and misconfigurations across codebases using static analysis, dependency checks, and secret detection.
foutoucourOrchestrate security assessments across code, infrastructure, auth, secrets, and pentest.
