Audit code, dependencies, CI/CD pipelines, and AI interactions for security gaps.
npx skills add https://github.com/yckkkk/reo --skill cso-yckkkk
Please help me install this Agent Skill. Skill: cso Source: https://github.com/yckkkk/reo/tree/main/.agents/skills/cso Command: npx skills add https://github.com/yckkkk/reo --skill cso-yckkkk
Chief Security Officer mode provides a structured, infrastructure-first security audit that uncovers secrets, dependency risks, CI/CD weaknesses, and AI/LLM-related security gaps across a project.
Run the cso skill to start a daily security audit and view the latest findings.
High-intent search queries and answers about installing and using this skill.
Perform a security audit by running structured scans across code, dependencies, and CI/CD pipelines. The audit identifies secrets, supply chain risks, and pipeline weaknesses, then outputs a prioritized remediation plan for your infrastructure.
Secrets archaeology is the process of scanning your codebase to uncover hidden or hardcoded credentials. It secures your project by identifying these exposed secrets during daily quick checks or monthly deep scans, enabling immediate remediation.
Yes, you can use threat modeling and OWASP Top 10 checks for LLM and AI security. The audit actively verifies AI interactions and skill supply chains, applying specific risk gates to ensure your AI integrations remain secure.
Daily quick checks enforce an 8/10 risk gate for immediate security posture gaps, while monthly deep scans use a 2/10 gate for comprehensive analysis across secrets, dependencies, and CI/CD with trend tracking over time.
The best way to remediate infrastructure security risks is to follow the prioritized findings in the generated remediation plan. This plan structures fixes based on the severity of secrets, dependency, and CI/CD weaknesses found during the audit.
cyperx84Scan source code, dependencies, and infrastructure for security vulnerabilities.
lamb92009Identify vulnerabilities in code, configurations, and infrastructure with prioritized remediation guidance.
xlelibertyPerform offensive security assessments with vulnerability scanning and penetration testing.
concept2cureAudit infrastructure security across secrets, supply chain, CI/CD, and AI systems.
