---
name: cso
description: >
  Infrastructure-first security audit across 14 phases: attack surface mapping,
  secrets archaeology (git history), supply chain analysis, CI/CD pipeline
  security, LLM/AI threat detection, OWASP Top 10, STRIDE threat modeling.
  Confidence gates, exploit scenarios, parallel verification, trend tracking.
  Read-only.
metadata:
  sources:
    - kind: github-file
      repo: garrytan/gstack
      path: cso/SKILL.md
      commit: f4bbfaa5bdfd2d6ce59541c2145432febde57fed
      attribution: Garry Tan
      license: MIT
      usage: referenced
source: https://app.decimal.ai/s/paperclipai-cso@1/SKILL.md
source_sha256: 51f5080a281a
---