Orchestrate infrastructure-first security audits across code, configurations, and supply chains.
npx skills add https://github.com/steadyfall/fspeek --skill cso-steadyfall
Please help me install this Agent Skill. Skill: cso Source: https://github.com/steadyfall/fspeek/tree/main/.claude/skills/gstack/cso Command: npx skills add https://github.com/steadyfall/fspeek --skill cso-steadyfall
Chief Security Officer mode orchestrates infrastructure-first security audits across secrets archaeology, dependency supply chain, CI/CD pipeline security, LLM/AI security, skill supply chain scanning, plus OWASP Top 10, STRIDE threat modeling, and active verification.
Run a CSO security audit on my repository.
High-intent search queries and answers about installing and using this skill.
A security audit orchestrates systematic checks across code, configurations, and dependency supply chains to identify risks. It applies OWASP and STRIDE threat modeling to generate actionable findings with standardized remediation guidance for teams.
Yes, you can use threat modeling for CI/CD pipeline security by applying OWASP Top 10 and STRIDE methodologies. This identifies risks across continuous integration and deployment configurations through policy checks and active verification steps.
Yes, the security audit covers LLM and AI vulnerability scanning. It includes dedicated LLM security checks alongside secrets archaeology and supply chain scanning to identify vulnerabilities in AI-integrated software stacks.
The best way to perform secrets archaeology is through infrastructure-first security audits using configurable scans. This uncovers hidden secrets across complex software stacks and hosted environments while generating auditable evidence for risk assessments.
Threat modeling and policy checks use OWASP Top 10 and STRIDE frameworks. These frameworks apply best-practice controls to identify and assess risks across complex software stacks and hosted environments during security reviews.
kivo360Configure Claude Code settings.json with permission controls and environment variables.
zangxin75Conduct security audits and code vulnerability reviews with SAST scans.
mindfortaiAnalyze software supply chains for vulnerabilities in dependencies, CI/CD pipelines, and deployment settings.
zebbernAutomate red-team reconnaissance and vulnerability discovery workflows.
