Audit codebases for secrets, supply-chain, CI/CD, and AI security risks.
npx skills add https://github.com/MissTully/Gstack --skill cso-misstully
Please help me install this Agent Skill. Skill: cso Source: https://github.com/MissTully/Gstack/tree/main/cso Command: npx skills add https://github.com/MissTully/Gstack --skill cso-misstully
Chief Security Officer mode provides an infrastructure-first security audit capability, focusing on secrets archaeology, dependency supply chain, CI/CD pipeline security, LLM/AI security, skill supply chain scanning, and active verification to keep AI-powered systems safe and compliant.
Run a daily CSO audit on the repository to identify secrets, supply-chain risks, and OWASP threats.
High-intent search queries and answers about installing and using this skill.
A security audit for secrets identifies leaked or embedded credentials across repositories and history. This approach performs secrets archaeology to actively verify and keep AI-powered systems safe and compliant.
Checking your dependency supply chain verifies third-party components for known vulnerabilities and tampering. The audit applies active verification to enforce safe handling of sensitive data across cloud deployments.
Securing LLM and AI workflows involves testing prompt safety, data access, and model risk. An infrastructure-first audit tests these boundaries to enforce OWASP Top 10 compliance and safe sensitive data handling.
Yes, you can use this security audit for daily health checks on cloud deployments. It applies to daily health checks, risk assessments, and compliance reviews with configurable scan thresholds and explicit guardrails.
Yes, the audit supports STRIDE threat modeling for CI/CD pipeline security. It assesses pipelines, access controls, and supply chain integrity while enforcing checks for STRIDE and OWASP Top 10.
Generating a compliance risk report involves creating actionable remediation plans and risk dashboards for audits. The audit produces these outputs to support compliance reviews for AI-enabled projects.
AradotsoProvision AWS S3 buckets and EC2 instances with Terraform for data engineering.
rauly-1408Identify security vulnerabilities and compliance gaps in software and infrastructure audits.
aporto-techExecute infrastructure security audits with OWASP Top 10 and STRIDE threat modeling.
borgheiIdentify and mitigate security risks in software systems using expert security engineering practices.
