cso

Automate security audits, vulnerability scanning, and threat modeling using Bash and security tools.

Updated Jun 16, 2026

Search Tags:#OWASP #threat modeling #security audit #vulnerability scanning #infrastructure security

Ready to run

npx skills add https://github.com/miko06/MedicineSimulator --skill cso-miko06

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: cso
Source: https://github.com/miko06/MedicineSimulator/tree/main/.opencode/skills/gstack-cso
Command: npx skills add https://github.com/miko06/MedicineSimulator --skill cso-miko06

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires Bash, Read, Grep, Glob, Write, Agent, WebSearch, AskUserQuestion, and includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill addresses the need for thorough security audits, vulnerability scanning, and threat modeling, ensuring robust security posture across infrastructure and applications.

Core Features & Use Cases

Security Audits: Perform deep dives into infrastructure, code, and configurations to identify potential security vulnerabilities.
Vulnerability Scanning: Scan for known vulnerabilities in the software supply chain, CI/CD pipelines, and AI components.
Threat Modeling: Utilize STRIDE and OWASP Top 10 frameworks for comprehensive threat analysis.
Use Case: When preparing for a compliance audit, use this Skill to automate the identification of security issues and generate detailed reports for remediation.

Quick Start

Activate the Chief Security Officer skill to initiate a daily or comprehensive security audit.

Frequently Asked Questions about cso

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I automate security audits and vulnerability scanning for my infrastructure?▼

To automate security audits and vulnerability scanning, this Skill utilizes Bash alongside Grep and Glob to perform deep dives into infrastructure and code, identifying potential security vulnerabilities and generating detailed reports for remediation.

Can I use OWASP Top 10 and STRIDE frameworks for threat modeling?▼

Yes, you can use OWASP Top 10 and STRIDE frameworks for threat modeling. This Skill automates comprehensive threat analysis using these specific frameworks to ensure a robust security posture across your applications.

What's the best way to prepare for a compliance audit using automated threat management?▼

The best way to prepare for a compliance audit is to activate this Skill to automate the identification of security issues across your infrastructure, generating detailed reports suitable for ongoing threat management and compliance verification.

Does vulnerability scanning work with CI/CD pipelines and the software supply chain?▼

Yes, vulnerability scanning works with CI/CD pipelines and the software supply chain. The Skill specifically scans these areas, alongside AI components, to identify known vulnerabilities and ensure infrastructure security.

Do I need access to specific security tools and configurations for accurate results?▼

Yes, you need access to security tools and configurations for accurate results. The Skill requires this access to properly execute deep security audits, vulnerability checks, and threat modeling tasks.

Why does WebSearch get utilized during infrastructure security checks?▼

WebSearch is utilized during infrastructure security checks to query external threat intelligence and cross-reference known vulnerabilities, enhancing the accuracy of routine security checks and compliance audits.