Scan secrets, supply chains, CI/CD pipelines, and LLM/AI security.
npx skills add https://github.com/LaPaGaYo/nexus --skill cso-lapagayo
Please help me install this Agent Skill. Skill: cso Source: https://github.com/LaPaGaYo/nexus/tree/main/skills/support/cso Command: npx skills add https://github.com/LaPaGaYo/nexus --skill cso-lapagayo
Chief Security Officer mode provides an infrastructure-first security auditing workflow that systematically scans for secrets, supply chain risks, CI/CD vulnerabilities, and adversarial AI threats across skill and host surfaces.
Invoke a comprehensive security audit on your Nexus-enabled environment and follow the prompts to start the dual-audit workflow.
High-intent search queries and answers about installing and using this skill.
Automate infrastructure security audits by scanning secrets, dependency supply chains, and CI/CD pipelines across Nexus-hosted hosts and skill surfaces. This workflow systematically detects vulnerabilities and provides actionable remediation during lifecycle reviews.
Threat modeling for LLM and AI security involves scanning skill supply chains for adversarial AI threats and OSINT-like risks aligned with OWASP Top 10. It systematically identifies potential attack vectors across skill and host surfaces during governance checks.
Yes, you can use nexus.skill.yaml manifests for governance checks during security audits. The auditing workflow integrates with these manifests to apply deterministic audit steps via scripts across your Nexus-enabled environment.
Yes, infrastructure security auditing works with YAML frontmatter-driven configuration requiring a mandatory name and description. It uses this configuration to apply deterministic audit steps across Nexus-hosted hosts and skill surfaces.
The best way to scan for secrets and dependency supply chain risks is using an infrastructure-first security auditing workflow. It performs secrets archaeology and dependency-supply-chain checks across pipelines and skill surfaces with guided remediation.
emliunixExtract mandatory frontmatter from SKILL.md to define a Skill Unit.
MolcajeteAIScan npm dependencies for vulnerabilities using npm audit, Snyk, and Socket.dev.
AlexandreLabIdentify and report security posture issues across infrastructure, CI/CD pipelines, and dependency supply chains.
TumeloRamaphosaAudits source code, dependencies, CI/CD pipelines, and AI/LLM attack surfaces for security.
