Audit infrastructure security across secrets, dependencies, CI/CD, and attack surfaces.
npx skills add https://github.com/Scivor/helm --skill cso-scivor
Please help me install this Agent Skill. Skill: cso Source: https://github.com/Scivor/helm/tree/main/skills/gstack/cso Command: npx skills add https://github.com/Scivor/helm --skill cso-scivor
Infrastructure-first security auditing that unearths secrets, supply-chain risks, misconfigurations, and risky integrations across code, CI/CD, and operations.
Invoke a daily CSO audit on your project to surface secrets, supply-chain gaps, and misconfigurations.
High-intent search queries and answers about installing and using this skill.
A security audit detects exposed credentials in config files, environment variables, and git history through secrets archaeology. It identifies stale keys and provides concrete risk ratings with actionable remediation guidance for fast resolution.
Dependency supply chain auditing identifies vulnerable or unpinned packages, compromised components, and unsafe supply-chain practices. It targets risky third-party integrations across your infrastructure to prevent supply-chain attacks.
Yes, this security audit performs threat modeling with OWASP Top 10 and STRIDE. It conducts risk-based verification across code, infrastructure, and pipelines to model your attack surface and identify misconfigurations.
Yes, you can check for insecure container settings and misconfigurations across CI/CD pipelines. The audit performs infrastructure-first security scanning across environments, identifying misconfigurations and insecure container settings.
The best way to automate infrastructure-first security scans is implementing a repeatable CSO workflow with daily and comprehensive modes. This surfaces secrets, supply-chain gaps, and misconfigurations with clear risk ratings and traceability.
You need LLM and AI security auditing when your infrastructure integrates artificial intelligence components. The audit identifies risky third-party integrations and insecure settings across your LLM and AI operations to prevent attacks.
cyperx84Scan source code, dependencies, and infrastructure for security vulnerabilities.
thoreinsteinIdentify and document security risks across repository authentication, secrets, configuration, dependencies, and data handling.
Logos-LiberIdentifies security vulnerabilities in code, dependencies, and container images.
xlelibertyPerform offensive security assessments with vulnerability scanning and penetration testing.
