Identify and remediate security posture gaps across dependencies, secrets, CI/CD pipelines, and AI risk surfaces.
npx skills add https://github.com/vnmoorthy/Skylog --skill cso-vnmoorthy
Please help me install this Agent Skill. Skill: cso Source: https://github.com/vnmoorthy/Skylog/tree/main/.claude/skills/gstack/cso Command: npx skills add https://github.com/vnmoorthy/Skylog --skill cso-vnmoorthy
Infra-first security audits that surface and remediate infrastructure, supply chain, and AI risk across the software stack to reduce exposure and improve governance.
Invoke the skill with /cso to start a baseline security posture audit across dependencies, secrets, and CI/CD risk.
High-intent search queries and answers about installing and using this skill.
A security audit scans dependencies, secrets, and CI/CD pipeline configurations to surface hidden credentials, leaked tokens, and build-time risks. It provides clear configuration hardening guidance and actionable remediation steps to reduce exposure.
STRIDE threat modeling identifies security threats across the software lifecycle using structured categories. You need it during pentest reviews and security audits to actively verify OWASP Top 10 coverage and remediate infrastructure posture gaps.
You check for leaked secrets and vulnerable components through secrets archaeology and dependency-supply-chain scanning. This process surfaces hidden credentials, leaked tokens, and stale components to reduce your overall software supply chain exposure.
Yes, you can audit LLM and AI safety risks alongside traditional infrastructure. The process evaluates AI risk surfaces and skill-supply-chain verification to prevent prompt leakage and model risk during your overall security posture assessment.
This approach supports both daily lightweight checks and comprehensive monthly deep scans. The two operating modes provide zero-noise daily verification and monthly trend tracking to meet active verification requirements across the lifecycle.
The best way to harden CI/CD pipelines is to assess build-time risks and configuration gaps during an infra-first security audit. This identifies exposure points and provides specific hardening guidance to improve governance and reduce attack surfaces.
cegit27Audit infrastructure security across secrets, dependencies, CI/CD, and LLM/AI.
raindayTrack blog article quality scores and generate delta reports from snapshots.
kirvinAnalyze code for OWASP Top 10 vulnerabilities, secrets, and dependency CVEs.
ibalasiteAudit code, CI/CD, dependencies, and cloud infrastructure for exposed secrets and supply-chain threats.
