TOPY.AI · AI CSO

ai.topy由 topy.ai 发布官方发布者v0.1.0更新于 Nov 5, 2026

Founders' AI CSO: vulnerabilities, dependencies, secrets, verified-site checks, threat model, fixes.

发布方自己的服务：TOPY.AI · AI CEO

已验证Streamable HTTP可网页运行云端与基础设施开发者工具安全与监控

概览

AI 生成的概览

TOPY.AI AI CSO 为编码助手提供首席安全官能力：CVE 与依赖检查、密钥扫描、已验证站点的 Web 检查、威胁建模与事件报告。

可以做什么
  • 排查是否受指定 CVE 影响，检查锁文件依赖、停止维护的运行时，以及安装前的软件包风险
  • 扫描代码中的密钥与不安全模式，生成 STRIDE 威胁模型和 OWASP ASVS 清单
  • 验证域名归属，评估 HTTP 安全头、Cookie 与 TLS，并对已验证站点做安全扫描
  • 在信任之前审查技能、插件和 MCP 服务器，并审计自有的 MCP 注册表
  • 记录安全事件，生成按风险分级、供人工执行的修复方案，并发送每周安全报告
适用场景
适合希望让助手持续做安全值守的小团队或独立创始人：每日 CVE 与停止维护提醒、上线前的密钥与代码检查、每周安全报告。也适合在安装第三方技能或 MCP 服务器前做安全审查。
运行要求
需要 TOPY.AI 账号并通过 OAuth 授权，或提供 TOPY_API_KEY（也可用 npm 包一次性登录）。可连接 topy.ai 远程端点，或使用本地 stdio 包 @topy-ai/cso-mcp 转发。主机检查与公开站点检查需在 OneMan 上由本人授予主机同意。需要网络访问。
安装前请注意
OAuth 会授权访问你的 TOPY.AI 账号，只有拥有 OneMan 运营的账号才能看到其发现结果。服务器会读取代码、git 历史和构建产物以查找密钥，发现结果会上传到 TOPY.AI。其声明不会修改服务器、防火墙或网站，也不会输出密钥，但修复方案与扫描结果仍应由人工复核。

安装

在 SourceWeft 中

  1. 打开 控制台中的 TOPY.AI · AI CSO，将其添加到工作区。
  2. 连接 所需的 凭据。它们会被私密存储，绝不会在公开页面上展示。
  3. 为需要使用其工具的对话启用该服务。

Web executable，通过 Streamable HTTP。 远程服务在工作区中配置后即可从网页运行时运行。

交给智能体安装

把这段提示词粘贴到 Claude Code、Codex、Cursor 等智能体，或 SourceWeft 对话中。智能体会读取该服务器的安装指南，先向你展示发布者、端点和登录方式，经你同意后再把它添加到你的客户端。密钥不会写进任何命令。

阅读 https://sourceweft.com/mcp/ai.topy%2Fcso/install.md，并按其中说明把这个 MCP 服务器接入我的客户端。修改任何配置之前，先告诉我它的发布者、端点和登录方式，等我确认。不要把 API 密钥写进命令或我会提交的文件；问我密钥应从哪里获取。

查看智能体所依据的安装指南

其他 MCP 客户端

把它添加到你客户端的 mcpServers 配置中。 客户端会在首次连接时完成 OAuth 登录。

{
  "mcpServers": {
    "topy-ai-ai-cso": {
      "type": "http",
      "url": "https://topy.ai/mcp/cso"
    }
  }
}

README

[TOPY AI CSO]

TOPY AI CSO Skills

19 skills that make your coding agent a small company's AI CSO: new CVEs and end-of-life dates for everything you run, no secrets in code, headers, TLS and safe scans of the domains you have verified, every skill and MCP server vetted before it is trusted, incident timelines and a weekly security report to the founder and the CEO — on the TOPY.AI CSO MCP server.

[npm] [MIT License] [MCP]

The AI CSO is goal-first. It keeps five standing goals — no open critical exposure (anything on CISA KEV or critical with a fix is fixed within days), zero secrets in code, verified-only active checks, nothing trusted unvetted (every new skill, MCP server and package checked first) and every incident with a timeline — and every skill below exists to move one of them.

  • Core (topy-ai-cso): connect, first setup (inventory, domain verification, host consent), the CSO's goals, the daily watch.
  • Vulnerabilities: are we affected by this CVE, dependencies and supply chain, end of life, vetting a package before install.
  • Code: secrets (rotate first, then remove), unsafe code patterns, a STRIDE threat model and the OWASP ASVS checklist.
  • Web: domain verification, headers and TLS, a safe scan of a verified site.
  • Agents: vet a skill or MCP server before it is installed (the App Factory gate), and audit your own MCP server.
  • Response: incident timelines, a fix plan with fix-risk tiers T1–T4, the weekly security report.

The safety model comes from Maggie Security and does not bend: the CSO never changes a server, firewall or website (fix and protection plans are for a person to review and apply), never scans a domain you have not verified, reads a server only after you grant consent yourself, by your own approval in the chat (an agent cannot), leaves checks of sites you don't control to a person (never a routine), never uses offensive techniques and never prints a secret. Changes take two calls — a preview, then your yes.

Install

sh
npx @topy-ai/cso-skills install                  # this project, for the agents set up herenpx @topy-ai/cso-skills install -g --mcp         # your user, plus the MCP servernpx @topy-ai/cso-skills install --category vulnerabilities,webnpx @topy-ai/cso-skills list

Claude Code plugins: /plugin marketplace add TOPY-AI-LTD/TOPY-AI-CSO-Skills, then /plugin install topy-ai-cso-all@topy-ai-cso. Codex: codex plugin marketplace add TOPY-AI-LTD/TOPY-AI-CSO-Skills. Pi: pi install npm:@topy-ai/cso-skills. See the installer README.

Connect TOPY.AI

https://topy.ai/mcp/cso — OAuth with your TOPY.AI account (the same one as the AI CEO, CFO and COO). Only the accounts that own the OneMan operation see its findings.

ClientHow
Claude, ChatGPT (web, desktop)custom connector https://topy.ai/mcp/cso
Claude Codeclaude mcp add --transport http topy-cso https://topy.ai/mcp/cso
Codexcodex mcp add topy-cso --url https://topy.ai/mcp/cso
Clients that only start a commandnpx -y @topy-ai/cso-mcp after npx @topy-ai/cso-mcp login
Terminal and scriptsnpm i -g @topy-ai/cso-cli && cso-cli login

Server checks (host-quick, host-audit) and passive checks of sites you don't control (public-check) are not on topy.ai: they need a person on OneMan, with host consent granted by the person's own approval in the chat.

How the skills fit together

topy-cso-connect ─▶ topy-cso-setup (inventory · domain verify · consent) ─▶ topy-cso-goals        │   daily 06:17: topy-cso-daily-watch ─▶ topy-cso-cve-response ─▶ topy-cso-incident ─▶ topy-cso-fix-plan        │                               topy-cso-dependencies · topy-cso-end-of-life   weekly Mon 07:23: topy-cso-weekly-report ─▶ the founder (email) and the CEO        │   before code ships: topy-cso-secrets · topy-cso-code-scan · topy-cso-threat-model   web (verified domains): topy-cso-domain-verify ─▶ topy-cso-web-checks ─▶ topy-cso-web-scan   before you trust it: topy-cso-package-vet · topy-cso-vet-skill · topy-cso-mcp-audit

Try: "Anything new I should worry about?", "Are we affected by CVE-2026-…?", "Did a key leak?", "Is this MCP server safe to install?", "Send the weekly security report"

Packages

PackageWhat it is
@topy-ai/cso-skillsThis installer (Claude Code, Codex, Pi, Cursor, Gemini CLI, …)
@topy-ai/cso-mcpThe CSO MCP server as a local stdio server (forwards to https://topy.ai/mcp/cso)
@topy-ai/cso-cliThe AI CSO on the command line

Repository structure

plugins/  topy-ai-cso/                   core skills + .mcp.json (Claude Code) and mcp.json (Codex)  topy-ai-cso-vulnerabilities/   topy-ai-cso-code/   topy-ai-cso-web/  topy-ai-cso-agents/            topy-ai-cso-response/  topy-ai-cso-all/               bundle that depends on all six.claude-plugin/marketplace.json     Claude Code marketplace.agents/plugins/marketplace.json    Codex marketplaceskills.json                         machine-readable cataloguepackages/skills/                    the @topy-ai/cso-skills installer

The skills are generated from a source catalogue kept next to TOPY.AI's MCP server; the build checks every tool a skill names against the CSO server's tool list. Please open an issue rather than editing a SKILL.md.

License

MIT © TOPY AI LTD. Privacy: topy.ai/privacy.

Skills

19 skills in 6 plugins, plus the topy-ai-cso-all bundle. Generated from the source catalogue: please open an issue rather than editing a SKILL.md.

AI CSO core (MCP) · topy-ai-cso

SkillTierWhat it does
topy-cso-connectcoreConnect the TOPY CSO MCP server and check what applies: the project's stack, verified domains, granted hosts, tools and feeds.
topy-cso-daily-watchcoreEvery morning: new CVEs, advisories and end-of-life dates for everything the company runs, matched to the stack — quiet unless something new needs a person.
topy-cso-goalscoreThe AI CSO's standing goals and its status report for the CEO: open critical exposure, secrets in code, verified-only checks, vetted skills and MCP servers, incident timelines.
topy-cso-setupcoreFirst run for a new company or site: inventory the stack, verify each domain you own, and explain host consent — so every later check is allowed and complete.

Vulnerabilities & supply chain · topy-ai-cso-vulnerabilities

SkillTierWhat it does
topy-cso-cve-responseconnectedA named CVE or advisory: are we affected, where, how urgent, and the response plan — with an incident timeline from start to close.
topy-cso-dependenciesconnectedKnown vulnerabilities in every lockfile ecosystem and in JavaScript copied into the site, prioritised, with the fixed versions.
topy-cso-end-of-lifeconnectedRuntimes, databases, web servers and operating systems that stopped (or will soon stop) getting security fixes, and what to upgrade to.
topy-cso-package-vetconnectedBefore adding a package: known vulnerabilities and malicious-package reports for that exact version, and a clear install / pin / don't install.

Code & secrets · topy-ai-cso-code

SkillTierWhat it does
topy-cso-code-scanconnectedUnsafe code patterns before they ship — injection, unsafe deserialisation, personal data in logs, weak crypto — with the safe pattern for each.
topy-cso-secretsconnectedKeys, tokens and passwords in the code, its git history and the build output — and the rotate-first fix for each.
topy-cso-threat-modelconnectedA STRIDE threat model of the system and an OWASP ASVS checklist filled from the findings — what could go wrong and how far we meet the standard.

Web surface · topy-ai-cso-web

SkillTierWhat it does
topy-cso-domain-verifyconnectedProve the company controls a domain (DNS TXT record or a token file) before any active check — the CSO never scans a site that isn't verified.
topy-cso-web-checksconnectedGrade a verified site's HTTP security headers and cookies (A+ to F) and its TLS (protocols, certificate trust and expiry), with the exact fix for each.
topy-cso-web-scanconnectedA safe, rate-limited vulnerability scan (known flaws, exposed files, misconfigurations) of a site the company has verified — never exploitation.

Agent & MCP security · topy-ai-cso-agents

SkillTierWhat it does
topy-cso-mcp-auditconnectedOWASP MCP checks on the company's own MCP tool registry: read-only hints, destructive tools behind confirmation, scopes, audit logging and hosts it may call.
topy-cso-vet-skillconnectedBefore a skill, plugin or MCP server is installed or published: prompt-injection, data exfiltration, over-broad permissions and risky tools — the App Factory security gate.

Response & reporting · topy-ai-cso-response

SkillTierWhat it does
topy-cso-fix-planconnectedTurn the findings into a reviewed runbook — each action tagged T1 (batch-safe) to T4 (stage first) — that a person reviews and runs. The CSO never applies it.
topy-cso-incidentconnectedRecord a security incident or CVE response from start to close — what happened, every step and who did it — so nothing is lost and the report writes itself.
topy-cso-weekly-reportconnectedEvery Monday: what is open by priority, what was fixed, what changed in the stack, and at most three actions — for the Founder by email and for the CEO.

来源：README.md，提交 40cbf4e

工具

0
该服务器需要登录，因此 SourceWeft 无法在没有账号的情况下读取其工具，也未收录。已连接账号所能看到的内容可能因账号及其权限而异。

版本历史

1
  1. v0.1.0最新Oct 29, 2026

评分

已满足适用检查项的 85%

该评分衡量此收录条目的完整程度，依据注册中心条目、端点与公开来源计算得出。它不是对服务器本身的评价，也不表示服务器安全或当前可用：可连通性是带日期的检查结果，评分也不包含安装量或用户评价。

  • 近 30 天内可连通必需25 分
  • 已声明认证方式必需10 分
  • 已列出工具15 分

    请让服务器在无凭据时响应 tools/list，或发布可在沙箱中无凭据启动的软件包。

  • 描述必需15 分
  • 图标10 分
  • 文档15 分
  • 许可证10 分

其他 Topy 集成

TOPY.AI · AI CEO

ai.topy官方发布者

TOPY.AI 的 AI CEO MCP 服务器，让助手撰写和维护创始人的商业计划、CEO 记录、融资与财务工作。

Streamable HTTP可网页运行鉴权
效率与工作流需要凭据Oct 26, 2026

TOPY.AI · AI CTO

ai.topy官方发布者

TOPY.AI AI CTO 让编程助手围绕 GitHub 处理 CI 失败、PR 审查、发布、部署与安全告警，充当小团队的 AI 技术负责人。

Streamable HTTP可网页运行鉴权
云端与基础设施需要凭据Oct 29, 2026

TOPY.AI · AI CRO

ai.topy官方发布者

远程或本地运行的 MCP 服务器，为助手提供小公司的 AI CRO：基于真实数据的营收复盘、销售管道、交易台、报价与催收。

Streamable HTTP可网页运行鉴权
效率与工作流需要凭据Oct 29, 2026

TOPY.AI · AI CPO

ai.topy官方发布者

TOPY.AI AI CPO 让助手具备产品管理能力：反馈分诊、优先级排序、PRD、预注册实验和决策日志。

Streamable HTTP可网页运行鉴权
效率与工作流需要凭据Oct 29, 2026

TOPY.AI · AI COO

ai.topy官方发布者

TOPY.AI 的 AI COO 服务器，让助手监控 AI 联合创始人的定时 Routine、失败、审批与每周运营报告。

Streamable HTTP可网页运行鉴权
效率与工作流需要凭据Oct 29, 2026