Audit infrastructure security with OWASP and STRIDE threat modeling.
npx skills add https://github.com/wodeh/gstack-kimi --skill cso-wodeh
Please help me install this Agent Skill. Skill: cso Source: https://github.com/wodeh/gstack-kimi/tree/main/cso Command: npx skills add https://github.com/wodeh/gstack-kimi --skill cso-wodeh
Chief Security Officer mode provides infrastructure-first security auditing to uncover secrets, verify dependency supply chains, secure CI/CD pipelines, and guard AI/LLM integrations, while applying OWASP Top 10 and STRIDE threat modeling with active verification.
Run a daily zero-noise security audit and, when needed, a monthly deep scan, then review and remediate findings.
High-intent search queries and answers about installing and using this skill.
An infrastructure security audit validates CI/CD pipeline security, verifies dependency supply chains, and performs secrets archaeology. It applies OWASP Top 10 and STRIDE threat modeling to uncover vulnerabilities across projects and deployment environments.
Secrets archaeology is the process of excavating hardcoded credentials and sensitive tokens within codebases. It secures software delivery by identifying exposed secrets across projects and environments before they can be exploited in deployment pipelines.
STRIDE threat modeling and OWASP reviews are applied through structured security governance checks. The process identifies and categorizes risks across large codebases, verifying infrastructure and LLM/AI integrations to ensure comprehensive risk assessment and secure software delivery.
Yes, you can run daily zero-noise security checks designed specifically to avoid excessive alert noise. These checks perform rapid vulnerability assessments, while monthly deep scans are available for comprehensive security governance reviews and deeper risk analysis.
Yes, infrastructure security auditing explicitly covers LLM and AI safety. It includes scanning skill supply chains and guarding AI integrations to identify vulnerabilities, ensuring that machine learning components meet governance and verification standards.
The best way to validate a dependency supply chain is through active verification during a security audit. This framework validates dependencies, scans skill supply chains, and cross-references findings against threat models to ensure the integrity of software delivery.
balic-AI-ML-R-D-ResourcesMap architecture, trust boundaries, and data flows for security audit scoping.
dy9759Identify and remediate security vulnerabilities across IT infrastructure and applications.
VertaKhanRun infrastructure-first security audits and generate a Security Posture Report.
cornmanwtfExecute automated SAST/DAST and vulnerability scans for security compliance.
