Automate Chief Security Officer-style audits of infrastructure, CI/CD, and supply chains.
npx skills add https://github.com/zz8011/harnesstest --skill cso-zz8011
Please help me install this Agent Skill. Skill: cso Source: https://github.com/zz8011/harnesstest/tree/main/.claude/skills/gstack/cso Command: npx skills add https://github.com/zz8011/harnesstest --skill cso-zz8011
Chief Security Officer level audits that reveal infrastructure, supply chain, and AI security gaps, helping teams reduce risk across CI/CD pipelines and deployed systems.
Invoke the cso skill with its default daily mode to start an infrastructure-first security audit.
High-intent search queries and answers about installing and using this skill.
Automating a security posture audit requires scanning infrastructure, secrets, and CI/CD pipelines. This skill executes CSO-grade reviews covering supply chain risk, LLM safety, and dependency checks to enforce governance workflows across cloud environments.
Secrets archaeology is the process of uncovering hidden credentials within codebases and deployment environments. This skill automates this discovery alongside CI/CD pipeline hardening to actively verify and enforce security policies across your infrastructure.
Threat modeling and OWASP Top 10 coverage checks are performed by applying STRIDE methodologies to identify security gaps. This skill automates active verification workflows to enforce compliance and map remediation workflows across your deployed systems.
Yes, this security audit tool supports daily zero-noise gating to prevent build interruptions. It operates in a default daily mode scoring 8/10 to provide rapid infrastructure-first checks, alongside comprehensive deep scans with trend tracking across runs.
Yes, this approach covers LLM security and AI safety verification as part of its core audit phases. It performs skill-supply-chain scanning to identify risk across third-party dependencies, enforcing governance and remediation workflows for AI safety.
The best way to conduct a risk-based security review is using an automated CSO-grade audit. This skill applies structured threat modeling and active verification to assess supply chain risk, CI/CD security, and infrastructure vulnerabilities across cloud environments.
SantiagoisperAudits infrastructure and applications for vulnerabilities across dependencies, CI/CD pipelines, and LLM/AI components using OWASP Top 10 and STRIDE threat modeling.
howdeployAudit infrastructure security gaps across secrets, dependencies, CI/CD, and LLM/AI.
westnMonitor security posture across infrastructure, code, and third-party risk.
Jesse-L-MAudit infrastructure, dependencies, and AI tooling with a 14-phase security workflow.
