Audit infrastructure for secrets, supply chain, CI/CD, and AI security gaps.
npx skills add https://github.com/lemig/transcriptor --skill cso-lemig
Please help me install this Agent Skill. Skill: cso Source: https://github.com/lemig/transcriptor/tree/main/.claude/skills/gstack/cso Command: npx skills add https://github.com/lemig/transcriptor --skill cso-lemig
Chief Security Officer mode provides infrastructure-first security audits to reveal secrets, supply-chain risks, CI/CD vulnerabilities, LLM/AI security gaps, and a transparent risk narrative across an organization's tech stack.
Run a daily CSO audit on a project to surface secrets and supply-chain risks.
High-intent search queries and answers about installing and using this skill.
An infrastructure security audit scans codebases, pipelines, and deployments to uncover secrets, dependency supply chain risks, and CI/CD vulnerabilities. It requires integrating tooling for secret scanning and dependency checks to identify and verify infrastructure threats.
STRIDE threat modeling is a structured approach to identifying security threats across CI/CD pipelines and deployments. You need it during comprehensive monthly deep scans to systematically uncover spoofing, tampering, and elevation of privilege risks in your infrastructure.
Yes, automated vulnerability verification supports daily security monitoring by applying a zero-noise, 8/10 confidence gate to filter out false positives. This daily mode surfaces only high-confidence risks across your codebase and CI/CD pipelines.
Yes, the security audit explicitly includes LLM and AI security gap analysis alongside infrastructure, secrets, and supply chain scanning. It evaluates your AI integrations for vulnerabilities during both daily monitoring and comprehensive monthly deep scans.
The best way to run an OWASP Top 10 assessment is executing a comprehensive monthly deep scan with a 2/10 confidence bar. This mode captures broader risk narratives across codebases and deployments, tracking vulnerability trends over time.
You need dedicated tool integrations for secret scanning, dependency checks, CI/CD analysis, and risk verification. These tools feed data into the audit pipeline to enable active verification and enforce security policies across your infrastructure.
Sir-chawakornDetect hardcoded credentials and generate remediation plans for secure vault migration.
gaaschkAudit codebases for OWASP Top 10 risks and supply-chain vulnerabilities.
martinholovskyAutomate CI/CD pipeline security hardening with GitHub Actions.
bobmatnycAutomate security testing and vulnerability detection across code, dependencies, and infrastructure.
