Audit infrastructure security, dependency integrity, and CI/CD controls.
npx skills add https://github.com/vib795/copilot-anatomy --skill cso-vib795
Please help me install this Agent Skill. Skill: cso Source: https://github.com/vib795/copilot-anatomy/tree/main/.github/skills/gstack-cso Command: npx skills add https://github.com/vib795/copilot-anatomy --skill cso-vib795
Infrastructure-first security audits to surface secrets, supply-chain weaknesses, CI/CD risks, and LLM/AI security gaps before they become incidents. It provides threat modeling, active verification, and trend tracking to improve security posture over time.
Run the daily CSO security audit workflow to generate a security posture report and review results.
High-intent search queries and answers about installing and using this skill.
Run the daily CSO security audit workflow to perform infrastructure security analysis, generate a posture report covering OWASP Top 10, STRIDE threat modeling, and active verification, and review the surfaced risks.
To scan for secrets and supply-chain risks in your CI/CD pipeline, use the CSO audit to perform secrets archaeology, dependency scanning, and CI/CD controls analysis, surfacing hidden credentials and pipeline weaknesses.
Trend tracking across security audit runs works by logging posture results over time, allowing you to monitor security improvements and regressions across daily hygiene checks and monthly deep scans.
Yes, the security audit covers LLM and AI security gaps by actively verifying infrastructure controls and dependency integrity to surface AI-specific risks before they become incidents.
Yes, you can use the mode-based operation for both daily hygiene checks and monthly deep scans, targeting end-to-end security coverage across infrastructure, dependencies, and CI/CD controls.
An end-to-end security posture audit provides actionable risk information by analyzing infrastructure security, dependency integrity, and CI/CD controls, surfacing secrets, supply-chain weaknesses, and threat modeling results.
bigeasyfreemanGenerate GitHub Actions and Argo CD pipeline configurations from Build Brief tasks.
dreadnodeGenerate BloodHound Enterprise exposure delta reports between two time windows.
smarmen86Automate infrastructure security audits and threat modeling for software projects.
voidrotConfigure SAST tools like Semgrep, CodeQL, and SonarQube for CI/CD pipelines.
