Automate security audits for supply chains, infrastructure, and AI attack surfaces.
npx skills add https://github.com/KrismithReddy12/gstack --skill cso-krismithreddy12
Please help me install this Agent Skill. Skill: cso Source: https://github.com/KrismithReddy12/gstack/tree/main/cso Command: npx skills add https://github.com/KrismithReddy12/gstack --skill cso-krismithreddy12
This skill addresses the critical security gaps in modern AI-assisted development by automating comprehensive audits across the entire software supply chain, infrastructure, and LLM-specific attack surfaces.
Invoke the cso skill to perform a comprehensive security audit of the current repository.
High-intent search queries and answers about installing and using this skill.
Automate security audits by running multi-phase verification logic that targets LLM prompt injection, unsanitized output, and OWASP Top 10 risks. This scans AI-specific attack surfaces to verify production-grade security posture in AI-assisted development environments.
Yes, you can scan for leaked secrets and insecure CI/CD configurations. The audit performs deep infrastructure-first scans across the software supply chain to detect hardcoded credentials and validate pipeline protection against supply chain attacks.
The best way to check OWASP compliance is to invoke an autonomous security audit. It automatically verifies OWASP compliance, checks git history for hardcoded credentials, and validates CI/CD pipeline security before shipping production services.
Yes, autonomous security auditing works for AI-specific attack surfaces. It specifically targets insecure tool-calling patterns, unsanitized LLM output, and prompt injection vectors to secure AI-assisted engineering workflows.
Detect shadow infrastructure and misconfigurations by running infrastructure-first auditing. This performs deep scans to identify insecure CI/CD configurations, shadow infrastructure, and leaked secrets across the software supply chain.
arbazkhan971Detect exposed secrets and rotate credentials into secret managers.
tchawla827Scan repositories and configurations for exposed secrets and validate .env safety.
yocxy2Automate security audits and threat modeling for software repositories.
4lermanAudit web applications, APIs, and infrastructure for security vulnerabilities.
