skills.rest
D0NMEGA
D0NMEGACOMMUNITY
Explore all skills by this author →
GitHub

gsd-secure-phase

Verify threat mitigations for completed phases and update SECURITY.md.

8|Updated Apr 9, 2026
Search Tags:#workflow#documentation#verify#security-audit#phase-management#threat-mitigation
One-click install
npx skills add https://github.com/D0NMEGA/donnyclaude --skill gsd-secure-phase-d0nmega
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: gsd-secure-phase
Source: https://github.com/D0NMEGA/donnyclaude/tree/main/packages/skills/gsd-secure-phase
Command: npx skills add https://github.com/D0NMEGA/donnyclaude --skill gsd-secure-phase-d0nmega

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Retroactively verify that threat mitigations are in place for a completed phase, ensuring security posture and compliance.

Core Features & Use Cases

  • Threat verification: audits the existence and adequacy of SECURITY.md mitigations for completed phases.
  • Artifact-driven validation: if SECURITY.md is missing, uses PLAN.md and the associated threat model to validate mitigations from artifacts.
  • Guided remediation: when a phase has not been executed, provides actionable guidance to prepare mitigations for upcoming phases.

Quick Start

Run the gsd-secure-phase skill for the latest completed phase to verify threat mitigations and update the SECURITY.md.

Frequently Asked Questions about gsd-secure-phase

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I verify threat mitigations for a completed project phase?▼

To verify threat mitigations for a completed phase, run an audit against your SECURITY.md file to confirm security posture and compliance. This retroactively checks that all required security controls are adequately documented and in place.

What is the best way to validate security mitigations if SECURITY.md is missing?▼

If SECURITY.md is missing, validate security mitigations using artifact-driven validation. This method extracts the threat model from PLAN.md and associated artifacts to verify mitigations were correctly implemented during the phase.

Can I prepare threat mitigations for a phase that has not been executed yet?▼

Yes, you can prepare threat mitigations for an unexecuted phase through guided remediation. This provides actionable guidance to help you define and set up necessary security controls before the phase begins.

Does verifying threat mitigations update my existing SECURITY.md file?▼

Yes, verifying threat mitigations updates your SECURITY.md file. The verification process preserves all workflow gates during execution while ensuring your security documentation reflects the current audit status.

What limitations exist when auditing a threat model from artifacts?▼

Auditing a threat model from artifacts requires a PLAN.md file containing the threat model. If the phase lacks artifacts, the process shifts to providing guidance rather than validating existing controls.

Related Skills

Explore More Legal & Compliance Skills→
electroheadfxelectroheadfx
4

gsd-secure-phase

Verify threat mitigations from SECURITY.md and PLAN.md artifacts.

Community
Advanced
tech-leads-clubtech-leads-club
5.0k

security-threat-model

Generate a repo-grounded AppSec threat model with assets, trust boundaries, and mitigations.

Official
Advanced
deerawandeerawan
1

gsd-secure-phase

Audit completed phase threat mitigations and update SECURITY.md.

Community
Intermediate
yusaduymazyusaduymaz

gsd-secure-phase

Verify implemented threat mitigations in completed GSD phase artifacts.

Community
Advanced