Identify and prioritize security risks across infrastructure, dependencies, CI/CD pipelines, and AI security.
npx skills add https://github.com/SeaLion-hub/DICEE --skill cso-sealion-hub
Please help me install this Agent Skill. Skill: cso Source: https://github.com/SeaLion-hub/DICEE/tree/main/.agents/skills/gstack/cso Command: npx skills add https://github.com/SeaLion-hub/DICEE --skill cso-sealion-hub
Security teams often struggle to get a complete, actionable view of risk across infrastructure, CI/CD pipelines, and AI systems. This Skill provides an infrastructure-first security audit that surfaces secrets archaeology, supply-chain risks, and threat models in a repeatable workflow.
Invoke the cso audit in daily mode to start an automated security posture assessment.
High-intent search queries and answers about installing and using this skill.
Automate infrastructure and CI/CD security audits by running structured workflows that map trusted boundaries, identify exposed configurations, and check for pipeline misconfigurations. This enforces reproducible posture reports and automated verification gates for clear risk assessment.
The best way to scan dependencies for supply chain risks is using a focused audit that identifies known CVEs and risky transitive dependencies. This approach provides reproducible tracking and integrates into daily checks or monthly comprehensive scans.
Threat modeling with STRIDE applies to infrastructure security by mapping trusted boundaries and exposing configuration risks. It uses OWASP Top 10 mappings to guide remediation and structure the audit workflow for reproducible posture reports.
Yes, you can run a daily zero-noise security check using a specific operational mode. This mode performs automated posture assessments for fast risk clarity, contrasting with comprehensive monthly scans that include trend tracking.
CI/CD security scanning prevents secret leakage by identifying insecure workflows and pipeline misconfigurations. It enforces automated verification gates across the pipeline to ensure secrets archaeology and exposed configurations are remediated.
Use comprehensive monthly scans when you need trend tracking and full coverage across infrastructure, dependencies, and AI security. Daily checks provide zero-noise quick assessments, while monthly scans deliver deep threat modeling and supply-chain resilience analysis.
ArogyaReddyConfigure Semgrep, SonarQube, and CodeQL for multi-language CI/CD security scanning.
saitarrunEnforce structured issue triage workflows with defined roles and states.
VertaKhanRun infrastructure-first security audits and generate a Security Posture Report.
wjgoarxivAutomate security audits with STRIDE, OWASP Top-10, and attack surface mapping.
