Chief Security Officer (CSO) Audit

Performs professional-grade infrastructure and code security audits, identifying vulnerabilities and producing detailed security posture reports.

triggers:security auditthreat modelpentest reviewOWASPCSO reviewvulnerability scan

GitHub SKILL.md

What it does

This skill transforms the agent into a veteran Chief Security Officer. It performs deep security audits that go beyond simple code scanning, focusing on the real attack surface: dependencies, CI/CD pipelines, exposed secrets in git history, and infrastructure misconfigurations.

When to use it

Invoke this skill for "security audits", "threat modeling", "pentest reviews", "OWASP Top 10 checks", or general "security reviews" of a project.

What's included

Scripts: Utilizes a suite of gstack binaries for telemetry, decision logging, and learning management.
Instructions: A comprehensive 14-phase audit pipeline including Stack Detection, Attack Surface Census, Secrets Archaeology, Supply Chain analysis, and a rigorous False Positive filtering gate (8/10 confidence requirement for daily mode).

Compatible agents

Designed primarily for Claude Code and other advanced AI agents capable of executing shell commands and utilizing structured toolsets.

Not yet audited

This skill has not been reviewed by our automated audit pipeline yet.

Information

Repository: gStack

More from gStack

Performance Benchmark

Measure and detect performance regressions for web pages using automated benchmarks, baselines, and trend analysis.

Related Skills

Reverse Engineer

Provides step-by-step guidance and best practices for binary reverse engineering: static analysis, dynamic tracing, disassembly, and documentation workflows for

Sandbox0 Integration

Guidance and templates for integrating Sandbox0 sandboxing into AI agents — CLI/SDK patterns, templates, volumes, network policy, and deployment choices.

OpenTestAI

Automated, high-confidence AI testing: bug detection, persona feedback, and prioritized test-case generation using many specialized tester profiles.

CTF Write-up Generator

Generate a concise, reproducible submission-style CTF writeup with a one-path solution script, metadata, and a short checklist for fast verification.

Minimal Run & Audit (repro reporting)

Execute a README-first smoke test and produce standardized reproducibility outputs (`repro_outputs/`) and PATCHES.md — trusted reporting for repo reproduction r

Skill Issue — Skill Auditor

Scan and audit installed agent skills to produce a health report covering inventory, usage, dependency checks, version status, and actionable recommendations.

GRC & Compliance (ServiceNow)

Guides Governance, Risk & Compliance (GRC) work in ServiceNow: policies, controls, risk records, audits and ES5 script examples for automating GRC workflows.

Azure External Attack Surface Management

Provides expert guidance for Azure External Attack Surface Management (EASM): quotas, configuration, integrations, and exporting inventory to analytics platform

MCP App Store

Chief Security Officer (CSO) Audit

What it does

When to use it

What's included

Compatible agents