Audit infrastructure security across secrets, dependencies, CI/CD, and LLM/AI systems.
npx skills add https://github.com/ligianehua/Gstack --skill cso-ligianehua
Please help me install this Agent Skill. Skill: cso Source: https://github.com/ligianehua/Gstack/tree/main/cso Command: npx skills add https://github.com/ligianehua/Gstack --skill cso-ligianehua
Chief Security Officer mode facilitates infrastructure-first security audits, covering secrets archaeology, dependency supply chain, CI/CD pipeline security, LLM/AI security, and skill supply chain scanning, with OWASP Top 10 and STRIDE threat modeling and active verification.
Use cases include ongoing risk monitoring, post-incident forensics, and pre-release security reviews.
Run the daily infrastructure-first CSO audit with /cso to start continuous risk monitoring across your repo.
High-intent search queries and answers about installing and using this skill.
Apply infrastructure-first security audits using STRIDE threat modeling and OWASP Top 10 to identify and mitigate risks across codebases, pipelines, and vendor dependencies, outputting structured remediation guidance.
Secrets archaeology discovers exposed credentials and sensitive data across code, commit history, and configuration files as part of a comprehensive infrastructure security posture review.
Verify CI/CD pipeline integrity and configuration hygiene while assessing third-party dependency supply chain risks beyond standard scanners and SBOMs during continuous security monitoring.
Perform LLM and AI security checks covering prompt hygiene, tool permissions, and access controls, alongside scanning the installed AI skill supply chain to evaluate safety.
Daily infrastructure audits run at an 8/10 confidence threshold for zero-noise checks, while monthly deep scans lower the bar to 2/10 to surface broader potential vulnerabilities and track audit trends.
Run the daily infrastructure-first CSO audit to start continuous risk monitoring across your repository, applicable for ongoing security reviews, post-incident forensics, and pre-release validations.
salmanabdurrahmanAnalyze CI/CD pipeline configurations for injection vectors, secret exposure, and access controls.
webrix-aiCorrelate CVE scan results with infrastructure to prioritize patching and create Jira tickets.
borgheiIdentify and mitigate security risks in software systems using expert security engineering practices.
devendrapratapsinghScan code, containers, and infrastructure for security vulnerabilities.
