Audit infrastructure security via code analysis, configuration checks, and threat modeling.
npx skills add https://github.com/joyce820309/holo-oahu --skill cso-joyce820309
Please help me install this Agent Skill. Skill: cso Source: https://github.com/joyce820309/holo-oahu/tree/main/.skills/gstack/cso Command: npx skills add https://github.com/joyce820309/holo-oahu --skill cso-joyce820309
This Skill provides a thorough security audit of your infrastructure, detecting vulnerabilities and potential threats to ensure your systems are secure.
Run the cso skill to initiate a security audit on your project.
High-intent search queries and answers about installing and using this skill.
To perform a security audit, this skill analyzes your code, checks configurations, and applies threat modeling to detect infrastructure vulnerabilities. It evaluates secrets, dependencies, CI/CD pipelines, and LLM security to identify and mitigate system risks.
STRIDE threat modeling evaluates systems for spoofing, tampering, repudiation, information disclosure, denial of service, and elevation of privilege. This skill uses the STRIDE model during vulnerability scanning to systematically identify and mitigate potential security threats.
Yes, you can assess OWASP Top 10 vulnerabilities in your application. The skill performs a detailed security audit specifically targeting the OWASP Top 10, alongside checking your CI/CD pipeline security and dependency supply chain for identified risks.
To classify sensitive data handled by your application, the skill categorizes information into restricted, confidential, internal, and public tiers. This data classification occurs during the comprehensive security audit to ensure proper handling of system information.
Yes, the security audit checks CI/CD pipeline security and dependency supply chains. It also performs secrets archaeology and LLM security scanning to comprehensively detect vulnerabilities and mitigate risks across your software development infrastructure.
You should use automated threat modeling for infrastructure security when you need to systematically detect vulnerabilities in sensitive environments. It benefits software development and IT security teams by identifying risks through code analysis and configuration checks before deployment.
cyperx84Scan source code, dependencies, and infrastructure for security vulnerabilities.
josavicentevwAutomate security scanning and governance across CI/CD pipelines and compliance workflows.
kk20300113-pngAutomate end-to-end security audits across infrastructure, dependencies, CI/CD, and LLM/AI systems.
claude-office-skillsAutomate security monitoring, threat detection, and incident response workflows.
