Audit infrastructure security for secrets, supply chain, CI/CD, and LLM risks.
npx skills add https://github.com/tyhuffman7/gstack-hermes --skill cso-tyhuffman7
Please help me install this Agent Skill. Skill: cso Source: https://github.com/tyhuffman7/gstack-hermes/tree/main/gstack-cso Command: npx skills add https://github.com/tyhuffman7/gstack-hermes --skill cso-tyhuffman7
Infrastructure-first security audits that uncover secrets, supply-chain risk, CI/CD vulnerabilities, and LLM/AI security gaps across your stack. It provides a structured approach to verify controls, model threats, and drive remediation with governance-ready outputs. Two modes exist: daily quick checks and comprehensive monthly deep audits, with trend tracking across runs to demonstrate improvement over time.
Run the cso skill to perform a daily security audit and generate a posture report.
High-intent search queries and answers about installing and using this skill.
Run an infrastructure-first security audit to scan code, configurations, and CI/CD pipelines for exposed secrets and supply chain risks. The daily quick check mode surfaces fresh risks fast using an 8/10 confidence gate.
Track security posture trends by running comprehensive monthly deep audits that assess dependency supply chains and LLM/AI gaps. The process verifies controls and generates governance-ready reports demonstrating improvement over time.
Perform threat modeling and verify OWASP coverage during a pre-release security posture validation. The audit applies active verification to identify risks and provides remediation guidance for closing gaps.
Yes, use automated auditing for incident postmortems and ongoing risk-trend analysis for policy compliance. It evaluates vendor ecosystems and LLM security gaps, producing governance-ready outputs for postmortem reviews.
Yes, the security audit covers LLM and AI security gaps across your stack. It scans infrastructure, code, and vendor ecosystems to identify supply-chain risks and model threats specific to AI implementations.
Run a daily quick check to rapidly surface fresh risks across configurations with an 8/10 confidence gate. Run a comprehensive monthly deep audit for thorough risk assessment across dependency supply chains and CI/CD pipelines.
cegit27Audit infrastructure security across secrets, dependencies, CI/CD, and LLM/AI.
LaPaGaYoScan secrets, supply chains, CI/CD pipelines, and LLM/AI security.
vib795Audit infrastructure security, dependency integrity, and CI/CD controls.
TumeloRamaphosaAudits source code, dependencies, CI/CD pipelines, and AI/LLM attack surfaces for security.
