gsd-secure-phase

To verify threat mitigations, audit the completed phase against existing security artifacts. The skill checks if planned mitigations were addressed and updates SECURITY.md with the audit results, preserving workflow gates.

Yes, you can audit phase security with only a PLAN.md. The skill reconstructs the threat model review from PLAN.md artifacts when SECURITY.md is missing, producing an updated security record from available evidence.

Workflow gates are strictly preserved when updating SECURITY.md. The skill produces controlled remediation output that maintains existing security validation checkpoints while adding the latest audit results.

Retroactive security checks for unexecuted phases are supported. The skill audits phases that were never executed by reconstructing the expected threat mitigations from available evidence and generating a SECURITY.md.

Yes, the phase security audit works automatically on the latest finished phase. When no specific phase number is provided, the skill defaults to reviewing the most recently completed implementation phase for threat mitigation.

Updating SECURITY.md maintains a continuous security record rather than fragmenting documentation. This controlled remediation output preserves workflow gates and consolidates phase audit evidence into a single source of truth.