Identify and remediate security risks across code, dependencies, CI/CD pipelines, and AI workflows.
npx skills add https://github.com/singhianand23045/GarryTan --skill cso-singhianand23045
Please help me install this Agent Skill. Skill: cso Source: https://github.com/singhianand23045/GarryTan/tree/main/cso Command: npx skills add https://github.com/singhianand23045/GarryTan --skill cso-singhianand23045
Security posture across code, dependencies, CI/CD pipelines, and AI workflows by performing infrastructure-first audits and active verification to reduce risk.
Run /cso to start a daily security posture audit across your project and its supply chain.
High-intent search queries and answers about installing and using this skill.
An infrastructure-first security audit identifies and remediates risks across code, dependencies, CI/CD pipelines, and AI workflows. It analyzes secrets exposure, dependency provenance, and LLM prompts to reduce overall risk through active verification.
Run a comprehensive security scan to evaluate your project against OWASP Top 10 and STRIDE threat modeling frameworks. This process checks secrets exposure, dependency supply chains, and CI/CD pipeline configurations to identify actionable risks.
Yes, you can perform secrets archaeology and dependency-supply-chain scanning to assess exposure. The audit actively verifies your CI/CD pipelines and dependency provenance to pinpoint and remediate hidden security vulnerabilities.
The best way is executing a targeted LLM and AI security auditing process. This evaluates your AI workflows and LLM prompts for potential vulnerabilities, integrating the findings into your broader security posture and active verification reports.
You can track security posture trends by running daily posture checks and monthly comprehensive scans. The audit provides active verification with trend tracking across runs, enabling proactive remediation of identified risks over time.
florianbuetowDetects integrity vulnerabilities in code, CI/CD configs, and dependencies.
naporin0624Detect security misconfigurations in Infrastructure as Code using tfsec and Checkov.
mostafasudoAudit infrastructure security across secrets, dependencies, CI/CD, and AI systems.
ano4lIdentify vulnerabilities in web applications, APIs, and infrastructure through authorized offensive security testing.
