What is the core philosophy of this skill?

The core philosophy is that security enables business; it focuses on pragmatic, risk-based thinking rather than 'security theater' to build genuine user trust.

How does it help with PR reviews?

It performs structured security reviews by classifying changes, identifying risks in specific files, and applying the STRIDE threat modeling framework to catch vulnerabilities early.

What is the CISO & Product Manager skill?

It is a specialized capability for Claude Code that provides strategic security analysis and product management guidance, specifically designed for the caro safety CLI project.

Does it focus only on security?

No, it balances security requirements with product vision, ensuring that safety features enable and empower users rather than acting as blockers to productivity.

Can it help with roadmap planning?

Yes, it analyzes roadmap items for their security value and potential risk, helping development teams prioritize the most impactful safety enhancements.

CISO & Product Manager

Name: CISO & Product Manager
Author: wildcard

bywildcard

•

Security & Testing

Provides strategic security guidance and product vision to ensure development aligns with risk management and user safety goals.

The CISO & Product Manager skill serves as a high-level strategic advisor for the caro project, blending deep security expertise with product management principles. It enables Claude to conduct comprehensive risk assessments, perform STRIDE-based threat modeling on new features, and review pull requests through a security-focused lens. By emphasizing privacy-by-design and security-by-design, this skill ensures that every architectural decision and roadmap item reinforces the core mission of making shell commands safer for users while maintaining a competitive and pragmatically focused product direction.

Key Features

01Security-focused PR review and risk classification

02Privacy-by-design and compliance recommendations

03Strategic roadmap alignment and security value prioritization

04STRIDE-based threat modeling for new feature assessments

05Competitive security analysis for CLI tool positioning

0626 GitHub stars

Use Cases

01Evaluating the security implications of a new CLI feature before implementation

02Reviewing complex pull requests for potential vulnerabilities and logic flaws

03Auditing project roadmaps to prioritize security goals alongside core functionality

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add wildcard/caro ciso-product-manager

For use in Claude.ai and ChatGPT

Download Skill