Identify and remediate security weaknesses across infrastructure, dependencies, and AI tooling.
npx skills add https://github.com/lyh2/gstack-deepseek --skill cso-lyh2
Please help me install this Agent Skill. Skill: cso Source: https://github.com/lyh2/gstack-deepseek/tree/main/cso Command: npx skills add https://github.com/lyh2/gstack-deepseek --skill cso-lyh2
Secures software ecosystems by performing an infrastructure-first security audit that surfaces secrets, supply-chain risks, CI/CD vulnerabilities, and AI/LLM security gaps.
Run /cso to start the daily audit, or /cso --comprehensive for a monthly deep scan.
High-intent search queries and answers about installing and using this skill.
Secrets archaeology discovers leaked credentials by scanning repositories, CI logs, and configuration files to identify exposed secrets across your infrastructure, producing a prioritized security posture report for remediation.
STRIDE threat modeling identifies security weaknesses across your infrastructure and AI tooling, using active verification to validate threats and produce prioritized remediation steps without requiring code changes.
Yes, the security audit performs LLM and AI security checks focusing on prompt safety, tool usage, and data handling, alongside scanning the skill supply chain to detect unsafe or malicious AI skills.
You can run daily quick assessments for continuous monitoring or monthly comprehensive deep scans using the /cso command, enabling trend tracking of your dependency supply chain and security posture over time.
No, the security audit evaluates CI/CD pipeline security misconfigurations and dependency risks, producing a security posture report with prioritized remediation steps without requiring direct code changes to your repositories.
EojEdredScan code and configurations for security vulnerabilities and replay risks.
saeed-vayghanIdentify and validate security weaknesses in web applications, networks, and APIs.
tyhuffman7Audit infrastructure security for secrets, supply chain, CI/CD, and LLM risks.
SantiagoisperAudits infrastructure and applications for vulnerabilities across dependencies, CI/CD pipelines, and LLM/AI components using OWASP Top 10 and STRIDE threat modeling.
