gsd-secure-phase
Audits and verifies security mitigations for a completed development phase.
Install
mkdir -p .claude/skills/gsd-secure-phase && curl -L -o skill.zip "https://agentskills.codes/api/skills/download/19256" && unzip -o skill.zip -d .claude/skills/gsd-secure-phase && rm skill.zipInstalls to .claude/skills/gsd-secure-phase
Activation
This is the description your AI agent reads to decide when to run this skill — the better it matches your request, the more reliably it fires.
Retroactively verify threat mitigations for a completed phaseKey capabilities
- →Verify threat mitigations for a completed phase
- →Audit existing SECURITY.md for mitigation verification
- →Run verification from PLAN.md if SECURITY.md is absent
- →Output an updated SECURITY.md file
- →Preserve all workflow gates during execution
How it works
It verifies threat mitigations for a completed phase by auditing existing security documentation or running from a threat model. This process updates the SECURITY.md file.
Inputs & outputs
When to use gsd-secure-phase
- →Security auditing
- →Post-phase threat verification
- →Updating security documentation
About this skill
Output: updated SECURITY.md. </objective>
<execution_context> @.agent/get-shit-done/workflows/secure-phase.md </execution_context>
<context> Phase: $ARGUMENTS — optional, defaults to last completed phase. </context> <process> Execute @.agent/get-shit-done/workflows/secure-phase.md. Preserve all workflow gates. </process>When not to use it
- →When there is no existing security documentation or threat model
- →When the goal is to create a new threat model rather than verify mitigations
Limitations
- →Exits with guidance if the phase is not executed
- →Requires existing security documentation (SECURITY.md) or a threat model (PLAN.md)
- →Output is limited to updated SECURITY.md
How it compares
This skill specifically focuses on retroactive verification of threat mitigations against completed work, which is distinct from initial threat modeling or proactive security design.
Compared to similar skills
gsd-secure-phase side by side with the closest alternatives in the catalog.
| Skill | Installs | Updated | Safety | Difficulty |
|---|---|---|---|---|
| gsd-secure-phase (this skill) | 0 | 2mo | No flags | Intermediate |
| secrets-management | 5 | 3mo | Review | Advanced |
| security-scanning-security-hardening | 3 | 3mo | No flags | Advanced |
| sast-configuration | 3 | 2mo | Review | Intermediate |
Try saying
Example prompts that trigger this skill in your AI assistant.
You might also like
secrets-management
wshobson
Implement secure secrets management for CI/CD pipelines using Vault, AWS Secrets Manager, or native platform solutions. Use when handling sensitive credentials, rotating secrets, or securing CI/CD environments.
security-scanning-security-hardening
sickn33
Coordinate multi-layer security scanning and hardening across application, infrastructure, and compliance controls.
sast-configuration
wshobson
Configure Static Application Security Testing (SAST) tools for automated vulnerability detection in application code. Use when setting up security scanning, implementing DevSecOps practices, or automating code vulnerability detection.
dependency-auditor
alirezarezvani
Check dependencies for known vulnerabilities using npm audit, pip-audit, etc. Use when package.json or requirements.txt changes, or before deployments. Alerts on vulnerable dependencies. Triggers on dependency file changes, deployment prep, security mentions.
mcp-security-scan
cisco-ai-defense
Scans MCP servers, tools, prompts, and resources for security vulnerabilities using YARA rules, LLM analysis, and Cisco AI Defense API. Use this skill when the user wants to check MCP servers for security issues, detect prompt injection, tool poisoning, or analyze MCP configurations for threats.
fix-cves
okteto
Fix all CVEs in the Okteto CLI Docker image by scanning with Trivy and updating vulnerable dependencies and binaries