SkillsAdd

open-gsd/gsd-core

gsd-secure-phase

Retroactively verify threat mitigations for a completed phase

First seen Jun 23, 2026

Installation

$ npx skills add open-gsd/gsd-core --skill gsd-secure-phase
View on skills.sh ↗ GitHub repository ↗

Similar popular skills

Related neighbors and high-traction skills in the same topics — useful to compare before installing.

insecure-defaults Similar name
trailofbits/skills

Detects fail-open insecure defaults (hardcoded secrets, weak auth, permissive security) that al…

6.5K installs
secure-workflow-guide Similar name
trailofbits/skills

Guides through Trail of Bits' 5-step secure development workflow. Runs Slither scans, checks sp…

6.5K installs
secure-code-guardian Similar name
jeffallan/claude-skills

Use when implementing authentication/authorization, securing user input, or preventing OWASP To…

4.3K installs
deserialization-insecure Similar name
yaklang/hack-skills

>- Insecure deserialization playbook. Use when Java, PHP, or Python applications deserialize un…

2.9K installs
insecure-source-code-management Similar name
yaklang/hack-skills

>- Source control and artifact exposure (.git, .svn, .hg, backups, .env). Use when recon finds …

2.9K installs
upload-insecure-files Similar name
yaklang/hack-skills

Insecure file upload playbook. Use when testing upload validation, storage paths, processing pi…

2.8K installs

Also in this package

Other skills from open-gsd/gsd-core · top by installs.

npx skills add open-gsd/gsd-core
gsd-verify-work 267 gsd-help 264 gsd-execute-phase 264 gsd-code-review 264 gsd-plan-phase 263 gsd-sketch 263 gsd-discuss-phase 261 gsd-map-codebase 260 gsd-ui-phase 260 gsd-capture 260

Browse all from open-gsd/gsd-core

More details

Agent compatibility

Declared targets from SKILL.md / docs. Unmarked agents are not listed — the skill may still install via the CLI.

Claude Code Declared
Cursor Not declared
Codex Not declared
GitHub Copilot Not declared
Windsurf Not declared
Gemini CLI Not declared
Cline Not declared
OpenCode Not declared

Repository health

Stars 9.2K
License LICENSE
Default branch next
Open issues 129
Status Active

Skill metadata

Parsed from SKILL.md frontmatter.

Allowed toolsRead, Write, Edit, Bash, Glob, Grep, Agent, AskUserQuestion
Declared agents claude-code

Package contents

Files included with this skill beyond the listing page.

  • skill md SKILL.md 790 B
  • docs SUMMARY.md 82 B

History

  1. First seen on skills.sh
  2. First recorded snapshot · 249 installs

SKILL.md

<objective> Verify threat mitigations for a completed phase. Three states:

  • (A) SECURITY.md exists — audit and verify mitigations
  • (B) No SECURITY.md, PLAN.md with threat model exists — run from artifacts
  • (C) Phase not executed — exit with guidance

Output: updated SECURITY.md. </objective>

<executioncontext> @~/.claude/gsd-core/workflows/secure-phase.md </executioncontext>

<context> Phase: $ARGUMENTS — optional, defaults to last completed phase. </context>

<process> Execute end-to-end. Preserve all workflow gates. </process>