Detect infrastructure-first security posture issues across repositories.
npx skills add https://github.com/JonOlsenCa/gstack-main --skill cso-jonolsenca
Please help me install this Agent Skill. Skill: cso Source: https://github.com/JonOlsenCa/gstack-main/tree/main/cso Command: npx skills add https://github.com/JonOlsenCa/gstack-main --skill cso-jonolsenca
Chief Security Officer mode standardizes infrastructure-first security audits across codebases, focusing on secrets archaeology, dependency supply chain, CI/CD security, LLM/AI risk, and active verification to reduce blind spots.
Run the daily CSO audit with /cso to begin a zero-noise security posture check across your repository.
High-intent search queries and answers about installing and using this skill.
To automate a security audit and detect secrets archaeology, dependency supply chain risks, and CI/CD gaps, run a daily zero-noise security posture check. This enforces active verification and OWASP Top 10 alignment across your repository environments and teams.
STRIDE threat modeling is a framework for identifying security threats like spoofing and repudiation. Applied to infrastructure security, it provides risk visibility and generates traceable mitigation plans to systematically reduce blind spots across your codebase.
Perform a dependency supply chain and LLM security risk assessment by running a monthly deep audit. This evaluates infrastructure-first security posture, tracks remediation trends over time, and actively verifies AI/LLM security gaps within your repository.
Yes, OWASP Top 10 audits cover multiple environments and teams. The standardized assessment applies active verification to ensure comprehensive risk visibility and traceable remediation across diverse infrastructure and pipeline configurations.
The best way to track security posture trends without false positives is running daily zero-noise checks. This approach standardizes infrastructure-first security audits and provides traceable remediation tracking across monthly deep assessments.
You need a deep infrastructure security assessment monthly or when auditing major changes, rather than relying solely on daily checks. Deep assessments evaluate broader dependency supply chain risks and LLM vulnerabilities while tracking remediation trends.
thanh-abaiiAudit infrastructure security with secrets archaeology, dependency analysis, and threat modeling.
tan-yong-shengAudit dependencies, configurations, and infrastructure for security weaknesses and generate remediation plans.
bigeasyfreemanAutomate STRIDE threat modeling and OWASP Top 10 scanning on code changes before merging.
a29paulAudit infrastructure security across secrets, dependencies, CI/CD, and LLM integrations.
