Run infrastructure-first security audits and generate a Security Posture Report.
npx skills add https://github.com/VertaKhan/cs_gstack --skill cso-vertakhan
Please help me install this Agent Skill. Skill: cso Source: https://github.com/VertaKhan/cs_gstack/tree/main/.claude/skills/gstack/cso Command: npx skills add https://github.com/VertaKhan/cs_gstack --skill cso-vertakhan
Chief Security Officer mode enables automated, infrastructure-first security audits that reveal secrets archaeology, dependency supply chain weaknesses, CI/CD pipeline security gaps, and LLM/AI security risks. It also supports skill supply chain scanning and threat modeling workflows to prevent security incidents before they occur.
Invoke the /cso command to start a daily security posture audit and switch to comprehensive for a deeper scan.
High-intent search queries and answers about installing and using this skill.
An infrastructure-first security audit scans for secrets archaeology, dependency supply chain weaknesses, and CI/CD pipeline gaps. It runs multi-phase workflows including stack detection and attack-surface census to generate a Security Posture Report with actionable remediation steps.
A daily security posture scan enforces an 8/10 confidence gate for zero-noise reporting, while a comprehensive deep scan performs monthly checks to track security trends over time. Both identify risks across secrets, dependencies, and pipelines.
Yes, the security audit supports OWASP Top 10 and STRIDE-based threat modeling. It performs active verification and remediation planning across your codebase and deployment to prevent security incidents.
Yes, automated security audits detect LLM and AI security risks alongside skill supply chain scanning. This prevents security incidents by revealing vulnerabilities in AI integrations and package dependencies.
The best way to identify dependency supply chain weaknesses is through package-supply scanning during a security audit. This process detects vulnerabilities in your dependency tree and provides concrete remediation steps.
A Security Posture Report includes concrete, actionable remediation steps based on findings from secrets archaeology, package-supply scanning, and CI/CD checks. It translates audit results into specific security governance actions.
securityreviewaiAnalyzes Git repositories to produce summaries of their structure, risks, and key components.
louisfghbvcIdentify and report security posture risks across infrastructure, secrets, and dependencies.
mgher668Audit infrastructure security across the stack for weaknesses and misconfigurations.
TumeloRamaphosaAudits source code, dependencies, CI/CD pipelines, and AI/LLM attack surfaces for security.
