Identify and remediate security risks across infrastructure, supply chain, and code.
npx skills add https://github.com/viraatdas/vstack --skill cso-viraatdas
Please help me install this Agent Skill. Skill: cso Source: https://github.com/viraatdas/vstack/tree/main/cso Command: npx skills add https://github.com/viraatdas/vstack --skill cso-viraatdas
Infrastructure-first security audits identify and remediate risks across secrets, CI/CD, and software supply chains to prevent breaches.
Trigger a CSO daily audit to generate an automated security posture report.
High-intent search queries and answers about installing and using this skill.
A security posture audit identifies and remediates risks across infrastructure, supply chains, and code. You can trigger automated daily risk monitoring or quarterly deep scans to generate actionable findings for exposed credentials and CI/CD vulnerabilities.
Secrets archaeology is the process of uncovering exposed credentials hidden within source code and CI logs. It actively scans historical pipeline data and repositories to detect compromised authentication tokens before they lead to security breaches.
Applying STRIDE threat modeling and OWASP Top 10 checks involves active verification of your application architecture against standard vulnerability categories. This process tracks security trends and identifies remediation steps for systemic software risks.
Dependency supply chain auditing verifies the integrity and security of third-party components used in your project. It identifies vulnerable or compromised dependencies within your software supply chain to prevent upstream breaches.
The security audit implements dual-mode operation to support both fast feedback and deep scans for CI/CD pipelines. This allows rapid daily risk monitoring during development and comprehensive quarterly investigations without changing tools.
Daily risk monitoring provides continuous automated posture reports for immediate threat detection, while focused security investigations are necessary for quarterly deep scans or targeted analysis of specific OWASP Top 10 vulnerabilities and CI/CD pipeline anomalies.
cyperx84Scan source code, dependencies, and infrastructure for security vulnerabilities.
louisfghbvcIdentify and report security posture risks across infrastructure, secrets, and dependencies.
rnavarychAutomate security testing with Snyk, Semgrep, Gitleaks, and OWASP ZAP in CI/CD pipelines.
huangwb8Identify and mitigate security risks through threat modeling and compliance checks.
