Identify and catalog security risks across code, dependencies, CI/CD, and infrastructure.
npx skills add https://github.com/NaKMiers/Port4lio --skill cso-nakmiers
Please help me install this Agent Skill. Skill: cso Source: https://github.com/NaKMiers/Port4lio/tree/main/.agents/skills/cso Command: npx skills add https://github.com/NaKMiers/Port4lio --skill cso-nakmiers
Reduces blind spots in security posture by performing structured, multi-domain audits across infrastructure, CI/CD, dependencies, and code. It identifies misconfigurations, leaked secrets, and weak controls so teams can act.
Run a full daily audit using the /cso command to begin the 8/10 confidence gate.
High-intent search queries and answers about installing and using this skill.
To audit security posture, you can run a daily scan to identify leaked secrets and dependency vulnerabilities across code and supply chains. This structured audit applies an 8/10 confidence gate to filter noise and surface actionable exposures.
Checking OWASP Top 10 coverage during a threat modeling review involves applying STRIDE methodology across code and infrastructure. This process identifies misconfigurations and weak controls, ensuring comprehensive security risk cataloging.
Yes, you can audit both CI/CD pipeline security and LLM/AI security within a single multi-domain scan. It identifies misconfigurations and weak controls across modern software stacks, covering infrastructure, dependencies, and AI considerations.
Active verification works for daily security posture checks by applying a zero-noise 8/10 confidence gate. This ensures only high-certainty exposures are surfaced, preventing alert fatigue while maintaining continuous risk identification.
You should run a comprehensive supply chain audit monthly for deep scans that track trends across audit runs. Unlike the daily zero-noise check, this comprehensive mode lowers the confidence bar to 2/10 to uncover deeper, systemic exposures.
Sir-chawakornDetect hardcoded credentials and generate remediation plans for secure vault migration.
josavicentevwAutomate security scanning and governance across CI/CD pipelines and compliance workflows.
vib795Audit infrastructure security, dependency integrity, and CI/CD controls.
adaptive-enforcement-labScan code, dependencies, and containers for vulnerabilities and generate SBOMs.
