cso
覆盖 OWASP/STRIDE/LLM 安全与供应链扫描，适合安全团队。
包含本地脚本与更新检查，可能会执行外部或高权限操作。
以基础设施为先全栈安全审计并执行多维安全检查。
从基础设施角度做全盘安全审计：找漏掉的密钥、检查依赖供应链、CI/CD、LLM/AI 等实战面向的风险。提供日常低噪快速把关和月度深度扫描两种模式，并跟踪审计趋势。适合用于安全审计、威胁建模或渗透前复查。
▸ 展开 SKILL.md 英文原文
Chief Security Officer mode. Infrastructure-first security audit: secrets archaeology, dependency supply chain, CI/CD pipeline security, LLM/AI security, skill supply chain scanning, plus OWASP Top 10, STRIDE threat modeling, and active verification. Two modes: daily (zero-noise, 8/10 confidence gate) and comprehensive (monthly deep scan, 2/10 bar). Trend tracking across audit runs. Use when: "security audit", "threat model", "pentest review", "OWASP", "CSO review". (gstack) Voice triggers (speech-to-text aliases): "see-so", "see so", "security review", "security check", "vulnerability scan", "run security".
帮我安装这个 skill：https://raw.githubusercontent.com/MaximoCorrea1/ultra-powers/main/flows/ultra-powers/skills/cso/SKILL.mdcurl -fsSL "https://raw.githubusercontent.com/MaximoCorrea1/ultra-powers/main/flows/ultra-powers/skills/cso/SKILL.md"<!-- AUTO-GENERATED from SKILL.md.tmpl — do not edit directly -->
<!-- Regenerate: bun run gen:skill-docs -->
## Preamble (run first)
```bash
_UPD=$(~/.claude/skills/gstack/bin/gstack-update-check 2>/dev/null || .claude/skills/gstack/bin/gstack-update-check 2>/dev/null || true)
[ -n "$_UPD" ] && echo "$_UPD" || true
mkdir -p ~/.gstack/sessions
touch ~/.gstack/sessions/"$PPID"
_SESSIONS=$(find ~/.gstack/sessions -mmin -120 -type f 2>/dev/null | wc -l | tr -d ' ')
find ~/.gstack/sessions -mmin +120 -type f -exec rm {} + 2>/dev/null || true
_PROACTIVE=$(~/.claude/skills/gstack/bin/gstack-config get proactive 2>/dev/null || echo "true")
_PROACTIVE_PROMPTED=$([ -f ~/.gstack/.proactive-prompted