Automate end-to-end infrastructure security audits with confidence-gated reporting.
npx skills add https://github.com/robertzengcn/aiFetchly --skill cso-robertzengcn
Please help me install this Agent Skill. Skill: cso Source: https://github.com/robertzengcn/aiFetchly/tree/main/.agents/skills/gstack/cso Command: npx skills add https://github.com/robertzengcn/aiFetchly --skill cso-robertzengcn
Manual security audits are slow, inconsistent, and buried in low-confidence false positives that waste engineering time. This Skill automates end-to-end infrastructure security testing with a confidence gate that only reports high-risk, verified findings for daily use, plus a deep scan mode for monthly comprehensive reviews.
Use the cso skill to run a daily zero-noise security audit of the current project and share only high-confidence findings with the engineering team.
High-intent search queries and answers about installing and using this skill.
Automated security audits with active verification test vulnerabilities in a safe environment to eliminate false positives. This confidence-gated approach only reports high-risk, verified findings, ensuring zero-noise daily pre-deployment reviews.
Secrets archaeology scans codebases to identify exposed API keys, tokens, and credentials across all file types and commit history. This automates infrastructure security testing to catch exposed secrets during recurring audits.
Supply chain security audits dependencies for known vulnerabilities, malicious packages, and CI/CD pipeline misconfigurations. This validates infrastructure components during monthly deep scans and compliance checks.
OWASP Top 10 validation and STRIDE threat modeling support scanning web and cloud infrastructure. This automates end-to-end security testing to identify high-risk vulnerabilities across infrastructure and compliance checks.
AI and LLM security checks identify prompt injection risks, RAG poisoning vulnerabilities, and unsafe tool calling permissions. This validates AI features during infrastructure security audits and recurring trend tracking.
Recurring trend tracking across audit runs uses two confidence-gated modes: daily zero-noise scans for fast pre-deployment checks and monthly deep scans for comprehensive compliance reviews. This generates shareable actionable reports for engineering teams.
florianbuetowDetects integrity vulnerabilities in code, CI/CD configs, and dependencies.
workinprogress-aiAudit software repositories for technical debt and architectural decay.
skyasu2Automate pre-deployment security audits for Next.js/Supabase CI pipelines.
martinholovskyApply OWASP Top 10 2025 and STRIDE threat modeling to secure SDLCs.
