Audit infrastructure for secrets, dependency, CI/CD, and LLM security risks.
npx skills add https://github.com/TobiasPerry/aws-hackathon --skill cso-tobiasperry
Please help me install this Agent Skill. Skill: cso Source: https://github.com/TobiasPerry/aws-hackathon/tree/main/.claude/skills/gstack/cso Command: npx skills add https://github.com/TobiasPerry/aws-hackathon --skill cso-tobiasperry
Secrets archaeology, dependency supply chain weaknesses, CI/CD pipeline security gaps, and LLM/AI security risks are identified and mitigated with an infrastructure-first approach, reducing exposure and improving resilience.
Run a daily CSO audit to begin infrastructure-first security assessment across the project.
High-intent search queries and answers about installing and using this skill.
A security audit identifies CI/CD pipeline gaps and dependency supply chain weaknesses using an infrastructure-first approach. It uncovers exposed secrets and mitigates risks across development, staging, and production environments to improve resilience.
Secrets archaeology is the process of uncovering hardcoded or leaked credentials within your codebase and pipelines. It reduces exposure by identifying and mitigating these hidden secrets before they can be exploited across your enterprise project infrastructure.
STRIDE-based threat modeling applies an OWASP-aligned risk review to your infrastructure security. It categorizes threats across your development, staging, and production pipelines to support secure posture management and targeted remediation.
Yes, you can run daily zero-noise security checks to monitor your infrastructure posture. This operational mode provides rapid, continuous assessment without overwhelming your team with false positives or unnecessary alerts.
The best way to assess LLM and AI security risks is through a comprehensive infrastructure-focused audit. This process identifies AI risk vectors and applies threat modeling to ensure governance and secure posture management across your pipelines.
You should run a comprehensive monthly deep scan when you need deeper coverage for enterprise governance and risk assessment. This mode provides extensive threat modeling and vulnerability discovery beyond the scope of daily zero-noise checks.
cosmixDesign and automate CI/CD pipelines for GitHub Actions, GitLab CI, and Jenkins.
zapabobScan dependencies and custom code for security vulnerabilities.
AradotsoHarden npm, pnpm, and Bun installs against supply-chain attacks.
smarmen86Automate infrastructure security audits and threat modeling for software projects.
