Audits infrastructure, dependencies, CI/CD pipelines, and code for security vulnerabilities.
npx skills add https://github.com/tgmarinho/canetaco --skill cso-tgmarinho
Please help me install this Agent Skill. Skill: cso Source: https://github.com/tgmarinho/canetaco/tree/main/.claude/skills/cso Command: npx skills add https://github.com/tgmarinho/canetaco --skill cso-tgmarinho
High-intent search queries and answers about installing and using this skill.
Invoke the skill with a phrase like "security audit" or "check for vulnerabilities". It scans secrets, dependencies, CI/CD configuration, and code against OWASP Top 10, then reports verified findings with concrete fixes.
Daily mode is zero-noise and only reports findings at 8/10 confidence or higher. Comprehensive mode is a monthly deep scan with a 2/10 reporting bar, surfacing lower-confidence issues for manual triage.
Yes. The audit explicitly includes CI/CD pipeline security alongside secrets archaeology, dependency supply chain analysis, and LLM/AI attack surface review. Findings are actively verified rather than reported speculatively.
Daily mode applies an 8/10 confidence gate so only high-certainty findings are reported. The skill also performs active verification of suspected issues before including them in the audit output.
Yes. The skill supports trend tracking across audit runs, so you can see whether your security posture is improving or regressing between daily and monthly scans.
cegit27Audit infrastructure security across secrets, dependencies, CI/CD, and LLM/AI.
TheophilusChinomonaAudit and harden OpenClaw gateway security configurations and incident response.
yiouliAutomate the QA loop for LLM applications using the pixie-qa Python package.
rifh2000Map NYDFS 23 NYCRR 500 controls to a cybersecurity program blueprint.
