manifest.json
14 lines · cso/sections/manifest.json at 3f79d81
1{
2 "$schema": "https://gstack.dev/schemas/section-manifest.json",
3 "skill": "cso",
4 "version": 1,
5 "note": "Passive host-section registry. Mode dispatch, trusted execution/privacy rules, evidence rubric, verification gates, reporting, and recovery stay always-loaded; only scope-dependent investigation detail is on demand.",
6 "sections": [
7 {
8 "id": "audit-phases",
9 "file": "audit-phases.md",
10 "title": "Scope-dependent audit phases: secrets, dependencies, CI/CD, infra, webhooks, LLM/AI, skill supply chain, OWASP Top 10, STRIDE, data classification (Phases 2-11)",
11 "trigger": "running the scope-dependent audit phases (Phases 2-11) selected by the resolved mode, after the Phase 0 stack detection and Phase 1 attack-surface census"
12 }
13 ]
14}