Audit codebases and infrastructure for vulnerabilities, secrets, and supply-chain risks.
npx skills add https://github.com/mihai-chiorean/inc --skill cso-mihai-chiorean
Please help me install this Agent Skill. Skill: cso Source: https://github.com/mihai-chiorean/inc/tree/main/skills/cso Command: npx skills add https://github.com/mihai-chiorean/inc --skill cso-mihai-chiorean
This skill provides a comprehensive, read-only security audit of your codebase and infrastructure, identifying vulnerabilities, secrets, and supply-chain risks without requiring manual security expertise.
Invoke the cso skill to perform a full security audit of the current repository.
High-intent search queries and answers about installing and using this skill.
An automated security audit scans your codebase read-only to identify vulnerabilities, leaked secrets, and supply-chain risks across development, CI/CD, and production environments, providing severity ratings and remediation guidance.
STRIDE threat modeling is a framework for identifying security threats across your tech stack. This audit automatically maps your attack surface, detecting exposed endpoints and frameworks to surface potential entry points and threats.
Yes, you can scan CI/CD configurations and dependencies to detect supply chain risks. The audit identifies malicious patterns, unpinned actions, and credential exposure without requiring manual security expertise.
To check for leaked secrets and OWASP Top 10 vulnerabilities, run a read-only security posture report. It performs secrets archaeology and vulnerability detection, generating detailed findings with remediation guidance.
No, the security audit is strictly read-only. It analyzes your codebase and infrastructure to surface security findings, threat models, and compliance verification without altering any files or configurations.
No manual security expertise is needed. The audit automatically surfaces security findings with assigned severity levels and actionable remediation guidance, satisfying requirements for automated threat modeling and OWASP compliance.
kfolkesScan container images, filesystems, Git repositories, and IaC for vulnerabilities and secrets.
michaelalberReview .NET applications for OWASP Top 10 vulnerabilities and Telerik CVEs.
andrewvaughanRun SAST, STRIDE, and attack-tree analysis to produce prioritized audit reports.
pistosminAudit infrastructure and software supply chains for security risks.
