cso
Chief Security Officer mode. (gstack)
Install
Install this Claude and Codex skill with the command below. The command stays visible even when copy support is unavailable.
git clone https://github.com/garrytan/gstack /tmp/gstack && ln -s /tmp/gstack/cso ~/.claude/skills/csoFrom README
When to invoke this skill Infrastructure-first security audit: secrets archaeology, dependency supply chain, CI/CD pipeline security, LLM/AI security, skill supply chain scanning, plus OWASP Top 10, STRIDE threat modeling, and active verification. Two modes: daily (zero-noise, 8/10 confidence gate) and comprehensive (monthly deep scan, 2/10 bar). Trend tracking across audit runs. Use when: "security audit", "threat model", "pentest review", "OWASP", "CSO review". Voice triggers (speech-to-text aliases): "see-so", "see so", "security review", "security check", "vulnerability scan", "run security". Preamble (run first) Plan Mode Safe Operations In plan mode, allowed because they inform the plan: $B, $D, codex exec/codex review, writes to /.gstack/, writes to the plan file, and open for generated artifacts. Skill Invocation During Plan Mode If the user invokes a skill in plan mode, the skill takes precedence over generic plan mode behavior.