Audit software systems for security posture and compliance.
npx skills add https://github.com/mr-daedalium/ostack --skill cso-mr-daedalium
Please help me install this Agent Skill. Skill: cso Source: https://github.com/mr-daedalium/ostack/tree/main/cso Command: npx skills add https://github.com/mr-daedalium/ostack --skill cso-mr-daedalium
Chief Security Officer mode enables automated security reviews by performing OWASP Top 10 audits, STRIDE threat modeling, attack surface analysis, auth flow verification, secret detection, dependency CVE scanning, supply chain risk assessment, and data classification review.
Run the cso skill to perform a full security audit on the current codebase.
High-intent search queries and answers about installing and using this skill.
An OWASP Top 10 security audit checks your software systems against major vulnerability categories like injection and broken access control. This CSO-style review scans your codebase for secrets, dependency CVEs, and auth-flow issues, then generates a comprehensive risk report.
The best way to apply STRIDE threat modeling is by analyzing your software system's attack surface for new features and deployments. This process identifies spoofing, tampering, repudiation, information disclosure, denial of service, and elevation of privilege risks to improve security posture.
Dependency CVE scanning works by checking your project's libraries against known vulnerability databases to assess supply chain risk. This automated review identifies vulnerable packages within your software systems, allowing you to remediate security threats before they reach production.
Yes, you can automate auth flow verification and secret detection across your deployments. The security audit runs on demand to verify authentication mechanisms and scan your codebase for hardcoded credentials, ensuring your software systems maintain a strong security posture and compliance.
You need data classification review for compliance risk reporting when handling sensitive information in your software systems. This process identifies how data is categorized and protected, forming a critical part of the CSO-style security audit to ensure regulatory compliance and mitigate data exposure risks.
capaas2Scan source repositories and configuration files for security vulnerabilities and exposed secrets.
chrislyonsAudit npm, Python, and Rust dependencies for vulnerabilities, licenses, and upgrades.
bomberoxenviosdosruedasAutomate DevOps workflows with Terraform, GitHub Actions, Kubernetes, and Prometheus.
Logos-LiberIdentifies security vulnerabilities in code, dependencies, and container images.
