Audit infrastructure for exposed secrets, dependencies, and LLM threats.
npx skills add https://github.com/Jia-Hong-Peng/jolike.com --skill cso-jia-hong-peng
Please help me install this Agent Skill. Skill: cso Source: https://github.com/Jia-Hong-Peng/jolike.com/tree/main/.claude/skills/gstack/cso Command: npx skills add https://github.com/Jia-Hong-Peng/jolike.com --skill cso-jia-hong-peng
Most security audits only scan application code and miss the real attack surface: exposed secrets in CI logs, stale API keys in git history, vulnerable dependencies, and LLM-specific threats like prompt injection. This Skill provides an infrastructure-first security audit that thinks like an attacker to find the doors that are actually unlocked.
Use the cso skill to run a full daily security audit on the current project and review the findings.
High-intent search queries and answers about installing and using this skill.
To run a full security audit, use this Skill to execute an infrastructure-first scan that uncovers exposed environment variables, stale API keys, and supply chain vulnerabilities. It generates a Security Posture Report with severity ratings and remediation plans without modifying project code.
Yes, you can use this audit to find LLM-specific security threats like prompt injection. The Skill performs infrastructure-first security audits that specifically include LLM integrations and skill supply chain analysis in its comprehensive security posture assessment.
The best way to identify stale API keys and exposed environment variables is using an infrastructure-first security audit. This approach examines CI/CD pipelines and git history before application code, actively verifying findings to generate actionable Security Posture Reports.
No, this security audit does not modify your project files during the OWASP Top 10 scan. It performs active verification of findings and generates Security Posture Reports with concrete remediation plans while keeping your project code completely untouched.
cegit27Audit infrastructure security across secrets, dependencies, CI/CD, and LLM/AI.
gitgoodordietryingAudit codebases and infrastructure for dependency vulnerabilities, secrets, and misconfigurations.
nahisahoAudit code, configurations, and dependencies for security vulnerabilities.
Logos-LiberIdentifies security vulnerabilities in code, dependencies, and container images.
