/gsd-secure-phase

Retroactively verify threat mitigations for a completed phase

open-gsd@open-gsd

GitHub

From plugin

gsd-core

8k71 skills34 agents71 commands7 hooks

Install

$ npx -y skills add open-gsd/gsd-core --skill gsd-secure-phase --agent claude-code

How it fires

How this skill gets triggered: by you, by Claude, or both.

Fires itselfAuto-invocation. Claude auto-loads it when your prompt matches the work.
You can call itInvoke it directly when you want it.
Slash command/gsd-secure-phase

Context preview

The summary Claude sees to decide when to auto-load this skill.

Retroactively verify threat mitigations for a completed phase

SKILL.md

gsd-secure-phase.SKILL.md

name: gsd-secure-phase
description: "Retroactively verify threat mitigations for a completed phase"
argument-hint: "[phase number]"
allowed-tools:
  - Read
  - Write
  - Edit
  - Bash
  - Glob
  - Grep
  - Agent
  - AskUserQuestion

<objective> Verify threat mitigations for a completed phase. Three states:

(A) SECURITY.md exists — audit and verify mitigations
(B) No SECURITY.md, PLAN.md with threat model exists — run from artifacts
(C) Phase not executed — exit with guidance

Output: updated SECURITY.md. </objective>

<execution_context> @~/.claude/gsd-core/workflows/secure-phase.md </execution_context>

<context> Phase: $ARGUMENTS — optional, defaults to last completed phase. </context>

<process> Execute end-to-end. Preserve all workflow gates. </process>

Read it on GitHub ↗

Ships withgsd-core

Git. Ship. Done. A light-weight meta-prompting, context engineering, and spec-driven development system for Claude Code, OpenCode, Antigravity CLI, Kimi CLI, Kilo, Codex, Copilot, Cursor, Windsurf, and more.

Get the whole plugin

Stats

JavaScript Node HTML Bash Git

+2 tags

GitHub Anthropic

7,969

Stars

553

Forks

Active

Maintenance

JavaScript