Audit software projects with OWASP Top 10 checks and STRIDE threat modeling.
npx skills add https://github.com/shenxingy/Clade --skill cso-shenxingy
Please help me install this Agent Skill. Skill: cso Source: https://github.com/shenxingy/Clade/tree/main/configs/skills/cso Command: npx skills add https://github.com/shenxingy/Clade --skill cso-shenxingy
It helps you find and prioritize real security weaknesses by systematically reviewing a project’s attack surface, dependencies, secrets, and threat model.
Ask the CSO skill to run a daily security audit of the entire repository by providing the project path or leaving the default to scan everything.
High-intent search queries and answers about installing and using this skill.
To perform an OWASP Top 10 security audit, the Skill systematically checks your project against each vulnerability category. It applies confidence and exploitability filtering to produce a prioritized findings report while reducing false positives.
STRIDE threat modeling is a structured approach to identify threats across major components and trust boundaries. Use it for pre-release hardening and ongoing security reviews to systematically evaluate your project's attack surface and prioritize codebase vulnerabilities.
Scanning for exposed secrets and dependency risks involves supply-chain archaeology to search for exposed credentials and evaluate dependency vulnerabilities. This process helps identify real security weaknesses during pre-release hardening or ongoing security review.
Yes, you can run a daily security review with minimal noise. The Skill enforces false-positive filtering using explicit rules and confidence thresholds, discarding low-signal items to ensure the prioritized findings report focuses on exploitability confirmation.
Yes, this security audit tool works for any software project with identifiable entry points, integrations, and build artifacts. It evaluates the attack surface and threat model, making it suitable for both pre-release hardening and ongoing codebase reviews.
slvDevGenerate a structured audit scope for Solidity codebases.
chicongstAudit trust boundaries, data flows, and secrets handling to produce a structured security review report.
nikhillinitDetect security vulnerabilities, secrets, and misconfigurations in codebases.
tapanshahPerform STRIDE threat modeling and vulnerability analysis for software components.
