Audit infrastructure, dependencies, and CI/CD processes for security weaknesses.
npx skills add https://github.com/Yaugourt/LiquidTerminal_Back --skill cso-yaugourt
Please help me install this Agent Skill. Skill: cso Source: https://github.com/Yaugourt/LiquidTerminal_Back/tree/main/.agents/skills/gstack/cso Command: npx skills add https://github.com/Yaugourt/LiquidTerminal_Back --skill cso-yaugourt
Reduces the risk surface by performing infrastructure-first security audits focused on secrets archaeology, dependency supply chain, CI/CD pipeline security, LLM/AI security, skill supply chain scanning, plus OWASP Top 10 and STRIDE threat modeling.
Run the CSO audit with /cso to start a daily security scan across infrastructure, dependencies, and AI/LLM controls.
High-intent search queries and answers about installing and using this skill.
A security audit for CI/CD pipelines and dependencies validates external risk across third-party components by checking supply chain integrity and pipeline controls. It performs threat modeling and OWASP checks to identify infrastructure weaknesses.
Secrets archaeology secures the software supply chain by discovering hidden credentials within infrastructure and dependencies. It reduces the risk surface by performing infrastructure-first security audits focused on identifying exposed secrets across pipelines.
STRIDE threat modeling for modern software stacks validates security posture and discovers vulnerabilities during security audits. It supports an 8/10 daily quick check and a 2/10 comprehensive monthly deep scan to verify governance across pipelines and dependencies.
You can verify LLM and AI security controls during a security audit through active verification of LLM security. The audit performs a comprehensive scan to identify weaknesses in AI controls alongside infrastructure and CI/CD process validation.
This security audit requires no external dependencies or tools to run. It operates independently to perform Chief Security Officer style governance, threat modeling, and vulnerability discovery directly across your software project's infrastructure.
A daily security gate provides an 8/10 quick check across infrastructure and dependencies, while a comprehensive scan is a 2/10 deep scan verifying governance. Both validate CI/CD controls, supply chain integrity, and LLM security posture.
cyperx84Scan source code, dependencies, and infrastructure for security vulnerabilities.
FxHollowAudit architecture, dependencies, and CI/CD pipelines to report security posture.
ivegamsftAutomate security audits, threat modeling, and vulnerability assessments for code.
infantesromeroadrianExecute Active Directory attacks and credential access techniques with Impacket, CrackMapExec, and Certipy.
