gsd:secure-phase

Retroactively verify threat mitigations for a completed phase

Stars: 2,987
Source: davepoon/buildwithclaude
Updated: 2026-05-26
Slug: davepoon--buildwithclaude--secure-phase

// install — copy + paste into any project

mkdir -p .claude/skills && curl -fsSL https://raw.githubusercontent.com/davepoon/buildwithclaude/HEAD/plugins/gsd/skills/secure-phase/SKILL.md -o .claude/skills/secure-phase.md

Drops the SKILL.md into .claude/skills/secure-phase.md. Works with Claude Code, Cursor, and any agent that loads SKILL.md files from .claude/skills/.

Verify threat mitigations for a completed phase. Three states: - (A) SECURITY.md exists — audit and verify mitigations - (B) No SECURITY.md, PLAN.md with threat model exists — run from artifacts - (C) Phase not executed — exit with guidance

Output: updated SECURITY.md.

@${CLAUDE_PLUGIN_ROOT}/workflows/secure-phase.md Phase: $ARGUMENTS — optional, defaults to last completed phase. Execute @${CLAUDE_PLUGIN_ROOT}/workflows/secure-phase.md. Preserve all workflow gates.