# Gsd Secure Phase

> Retroactively verify threat mitigations for a completed phase

- Skill: `delorenj/gsd-secure-phase-2` (Agent Skill)
- Install (CLI): `npx skillmds@latest add delorenj/gsd-secure-phase-2`
- Raw SKILL.md: https://api.skillmd.com/api/skills/delorenj/gsd-secure-phase-2/raw
- Safety review: pending
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: Security
- Author: delorenj (https://skillmd.com/u/delorenj)
- Updated: 2026-09-17
- Page: https://skillmd.com/skills/delorenj/gsd-secure-phase-2

---


<objective>
Verify threat mitigations for a completed phase. Three states:
- (A) SECURITY.md exists — audit and verify mitigations
- (B) No SECURITY.md, PLAN.md with threat model exists — run from artifacts
- (C) Phase not executed — exit with guidance

Output: updated SECURITY.md.
</objective>

<execution_context>
@.github/get-shit-done/workflows/secure-phase.md
</execution_context>

<context>
Phase: $ARGUMENTS — optional, defaults to last completed phase.
</context>

<process>
Execute @.github/get-shit-done/workflows/secure-phase.md.
Preserve all workflow gates.
</process>