# cso

> Claude/Codex skill by [@garrytan](https://omgskills.com/library/garrytan/index.md) · 132k stars · Updated 2026-09-09

Chief Security Officer mode. (gstack)

## Install

```sh
git clone https://github.com/garrytan/gstack /tmp/gstack && ln -s /tmp/gstack/cso ~/.claude/skills/cso
```

## From README

When to invoke this skill Infrastructure-first security audit: secrets archaeology, dependency supply chain, CI/CD pipeline security, LLM/AI security, skill supply chain scanning, plus OWASP Top 10, STRIDE threat modeling, and active verification. Two modes: daily (zero-noise, 8/10 confidence gate) and comprehensive (monthly deep scan, 2/10 bar). Trend tracking across audit runs. Use when: "security audit", "threat model", "pentest review", "OWASP", "CSO review". Voice triggers (speech-to-text aliases): "see-so", "see so", "security review", "security check", "vulnerability scan", "run security". Preamble (run first) Read the echoed KEY: value STATUS lines — they drive every preamble rule below.

## Links

- HTML page: https://omgskills.com/skills/garrytan/gstack/cso/
- GitHub: https://github.com/garrytan/gstack
- Author: [@garrytan](https://omgskills.com/library/garrytan/index.md)

## More from this repo

- [gstack](https://omgskills.com/skills/garrytan/gstack/index.md) — Router for the gstack skill suite.
   - [@garrytan](https://omgskills.com/library/garrytan/index.md) · 132k stars
- [autoplan](https://omgskills.com/skills/garrytan/gstack/autoplan/index.md) — Auto-review pipeline — reads the full CEO, design, eng, and DX review skills from disk and runs them sequentially with...
   - [@garrytan](https://omgskills.com/library/garrytan/index.md) · 132k stars
- [benchmark](https://omgskills.com/skills/garrytan/gstack/benchmark/index.md) — Performance regression detection.
   - [@garrytan](https://omgskills.com/library/garrytan/index.md) · 132k stars