Audit repository security posture with findings, severity ratings, and remediation plans.
npx skills add https://github.com/MFS-code/gstack --skill cso-mfs-code
Please help me install this Agent Skill. Skill: cso Source: https://github.com/MFS-code/gstack/tree/main/cso Command: npx skills add https://github.com/MFS-code/gstack --skill cso-mfs-code
It helps teams systematically find real security weaknesses across code, dependencies, CI/CD pipelines, infrastructure configuration, and even AI/LLM-related risks, producing a defender-ready report instead of vague security theater.
Run the Chief Security Officer audit by telling your agent: "Execute /cso for a full daily security posture review."
High-intent search queries and answers about installing and using this skill.
To run a security audit, trigger the manual command to initiate a multi-phase workflow that scans your CI/CD pipeline, dependency supply chain, and infrastructure configuration, generating concrete findings and remediation plans.
Infrastructure-first security posture auditing identifies exposure patterns across your application architecture, deployment surfaces, and operational configuration without modifying code, producing defender-ready reports instead of vague security theater.
Yes, you can assess OWASP Top 10 risks through structured threat modeling that applies STRIDE-style categories to your target repository, turning identified vulnerabilities into actionable fixes and ongoing trend tracking.
Yes, the security review treats secrets exposure and dependency supply-chain risks as first-class concerns, while also performing dedicated LLM and AI security checks to identify vulnerabilities across your target repository.
The best way to reduce false positives is using a confidence-gated verification process within a daily mode optimized to reduce noise, ensuring the audit generates high-signal findings before digging deeper in comprehensive mode.
You need to trigger the security audit manually using the designated slash command, as it requires explicit manual execution to initiate the structured multi-phase workflow for stack detection and reporting.
kagentiScan a cloned repository for tech stack, CI/CD, security, and test coverage gaps.
makyua-sanAudit infrastructure security posture and generate a Security Posture Report with severity ratings.
imMamdouhaboammarAutomate infrastructure provisioning and CI/CD pipeline development.
zhifengzhang-szAudit infrastructure security posture across secrets, supply chain, CI/CD, and AI/LLM.
