Audit project security across secrets, dependencies, CI/CD, and LLM/AI surfaces.
npx skills add https://github.com/yashs33244/my-mac-claude --skill cso-yashs33244
Please help me install this Agent Skill. Skill: cso Source: https://github.com/yashs33244/my-mac-claude/tree/main/skills/gstack/cso Command: npx skills add https://github.com/yashs33244/my-mac-claude --skill cso-yashs33244
It helps you perform high-signal security audits by systematically checking where real risk comes from: secrets, dependencies, CI/CD, threat models, and LLM/AI-specific attack surfaces.
Use the skill when you want a security audit or threat model by saying: run security review for my project with OWASP Top 10 and STRIDE, include secret scanning, dependency supply chain checks, CI/CD hardening, and LLM/AI security review.
High-intent search queries and answers about installing and using this skill.
To run a security audit with OWASP Top 10 and STRIDE threat modeling, trigger a review request covering secrets, dependencies, and CI/CD pipelines. The skill combines structured frameworks with active verification loops to systematically reduce false positives.
Infrastructure-first security scanning systematically checks high-signal risk sources like secrets archaeology, dependency supply chains, and CI/CD pipelines. This approach prioritizes underlying infrastructure vulnerabilities before evaluating application-level logic flaws.
You can scan for exposed secrets and dependency supply chain risks by running the infrastructure-first security audit. It performs secrets archaeology and dependency scanning to identify high-confidence issues across your project components.
Yes, you can perform an LLM security review alongside CI/CD hardening checks. The audit covers LLM and AI-specific attack surfaces while simultaneously evaluating pipeline configurations and dependency supply chain security.
Daily confidence-gated security reviews run low-noise passes to surface only high-confidence issues, avoiding speculative results. Comprehensive deep scans perform broader monthly audits with trend tracking to spot recurring weaknesses across audit runs.
Threat modeling with active verification reduces false positives in security audits by combining structured frameworks like OWASP Top 10 and STRIDE with iterative verification loops. This validates findings before reporting them as actionable issues.
cegit27Audit infrastructure security across secrets, dependencies, CI/CD, and LLM/AI.
robertzengcnAutomate end-to-end infrastructure security audits with confidence-gated reporting.
RicherTunesImplement CodeQL workflows, Dependabot configurations, and security policy documentation for repositories.
Logos-LiberIdentifies security vulnerabilities in code, dependencies, and container images.
