meow:cso

What problem does it solve?

Chief Security Officer mode provides infrastructure-first security audits, focusing on secrets archaeology, dependency supply chain, CI/CD security, LLM/AI security, skill supply chain scanning, OWASP Top 10, STRIDE threat modeling, and active verification. It enables structured, repeatable security assessments across daily and comprehensive scans with preset gating and cross-session tracking.

Core Features & Use Cases

• Conducts daily (8/10 confidence, zero-noise) and comprehensive (2/10 bar, deeper) security audits with phased workflows spanning from architecture reconnaissance to remediation planning.
• Evaluates code, infrastructure, dependencies, and integrations using OWASP, STRIDE, and data-classification methodologies; produces a Security Posture Report with severity ratings and remediation roadmaps.
• Supports role-based usage for CSO-like review, including plan creation, evidence collection, and trend tracking across runs.

Quick Start

Start a quick security audit with the CSO workflow using the /meow:cso command and predefined scopes.