Identifies and reports security gaps across code, dependencies, CI/CD pipelines, and AI/LLM workflows.
npx skills add https://github.com/legotec73/gstack --skill cso-legotec73
Please help me install this Agent Skill. Skill: cso Source: https://github.com/legotec73/gstack/tree/main/cso Command: npx skills add https://github.com/legotec73/gstack --skill cso-legotec73
Infrastructure and software teams struggle to perform repeatable, end-to-end security audits that cover code, dependencies, CI/CD pipelines, and AI/LLM workflows. This Skill provides a structured CSO-style framework to surface risks, model threats, and verify security controls across the software lifecycle.
Run a daily CSO audit on your current project to begin collecting risk findings.
High-intent search queries and answers about installing and using this skill.
To perform a security audit, this Skill runs structured scans across code, dependencies, and CI/CD pipelines to identify gaps. It generates a Security Posture Report with concrete findings and remediation guidance aligned with OWASP Top 10.
STRIDE threat modeling is a framework for identifying security threats, applied here to actively verify security controls across software workflows. It surfaces risks across code, dependencies, and CI/CD pipelines, producing a structured Security Posture Report.
Yes, you can use this security audit for both daily quick checks and monthly deep scans. Daily checks enforce an 8/10 confidence gate for zero-noise findings, while monthly scans lower the bar to 2/10 to enable comprehensive risk management.
Yes, this audit covers LLM and AI workflow security risks by including dedicated scanning for AI workflows. It surfaces vulnerabilities across the software lifecycle, integrating these findings into the final Security Posture Report.
The best way to find leaked secrets and analyze your dependency supply chain is through secrets archaeology and supply chain analysis. This Skill scans infrastructure and dependencies to surface hidden risks and generate remediation plans.
You should not use a zero-noise daily security check when you need a comprehensive monthly deep scan. Daily checks apply an 8/10 confidence gate to suppress low-certainty findings, whereas monthly scans lower the threshold to 2/10 for full visibility.
florianbuetowDetects integrity vulnerabilities in code, CI/CD configs, and dependencies.
Jia-Hong-PengAudit infrastructure for exposed secrets, dependencies, and LLM threats.
not-subhuOrchestrate dependency audits, static application security testing, and privacy dataflow analysis.
mulyovedDeliver a complete security audit report with prioritized recommendations.
