Audit security posture across code, dependencies, CI/CD, and infrastructure.
npx skills add https://github.com/timurgaleev/vibestack --skill cso-timurgaleev
Please help me install this Agent Skill. Skill: cso Source: https://github.com/timurgaleev/vibestack/tree/main/skills/cso Command: npx skills add https://github.com/timurgaleev/vibestack --skill cso-timurgaleev
Chief Security Officer-style guidance to systematically audit and report security posture across code, dependencies, CI/CD, and infrastructure, turning vague risk concerns into concrete remediation plans.
Run a daily CSO audit to generate a security posture report for your project.
High-intent search queries and answers about installing and using this skill.
A security audit systematically identifies posture risks across code, dependencies, CI/CD, and infrastructure using a repeatable CSO workflow. It scopes analysis to specific surfaces and produces actionable findings with severity ratings and concrete remediation steps.
Generating a vulnerability report through a structured CSO audit yields severity-rated findings with scope-defined analysis. The deterministic workflow ensures repeatable deep scans that turn vague risk concerns into traceable, actionable remediation plans.
Security posture audits preserve data privacy and support offline analysis where possible. The deterministic workflow evaluates code, dependencies, and infrastructure locally, ensuring sensitive configurations remain protected while producing actionable risk findings.
Security audits cover OWASP-aligned vulnerability risks and AI risk surfaces alongside code, dependencies, and infrastructure. The CSO workflow applies strict gating and risk scoring across all surfaces to produce comprehensive, actionable findings with remediation steps.
Scoping a security audit to infrastructure risks involves tailoring the analysis scope within the CSO workflow to target specific surfaces like infra, code, or skills. This focused approach produces targeted findings with severity ratings rather than a full-text deep scan.
A full-text security audit is suited for monthly deep scans across all risk surfaces, while scoped CI/CD vulnerability reviews fit daily or targeted checks. Both use the repeatable CSO workflow with strict gating to produce severity-rated, actionable findings.
ThiagoGuislottiBuild CI/CD pipelines, container images, and Kubernetes manifests with validation.
florianbuetowDetects integrity vulnerabilities in code, CI/CD configs, and dependencies.
xlelibertyPerform offensive security assessments with vulnerability scanning and penetration testing.
statick88Automate vulnerability detection across code, dependencies, containers, and infrastructure.
