skills.rest
tinner-deinno
tinner-deinnoCOMMUNITY
Explore all skills by this author →
GitHub

gsd-secure-phase

Audit SECURITY.md or reconstruct threat mitigation verification from PLAN.md artifacts.

1|Updated May 24, 2026
Search Tags:#security#verification#gsd#threat model#security documentation#phase audit#workflow gates
One-click install
npx skills add https://github.com/tinner-deinno/innova-skills-lib --skill gsd-secure-phase-tinner-deinno
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: gsd-secure-phase
Source: https://github.com/tinner-deinno/innova-skills-lib/tree/main/core/gsd/gsd-secure-phase
Command: npx skills add https://github.com/tinner-deinno/innova-skills-lib --skill gsd-secure-phase-tinner-deinno

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill helps you retroactively validate that a completed project phase has the right threat mitigations documented and consistent with the phase’s execution artifacts.

Core Features & Use Cases

  • Security artifact verification: Confirms whether SECURITY.md exists and audits its mitigation coverage.
  • Threat-model-driven reconstruction: If SECURITY.md is missing but PLAN.md with a threat model exists, reconstructs mitigation verification from available artifacts.
  • Guardrails for unfinished phases: Detects phases that were not executed and exits with guidance rather than guessing.

Quick Start

Run gsd-secure-phase for phase 3 to update SECURITY.md with verified threat mitigation results.

Frequently Asked Questions about gsd-secure-phase

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I verify threat mitigations after completing a project phase?▼

Retroactive security verification audits an existing SECURITY.md for mitigation coverage or reconstructs verification from PLAN.md threat-model artifacts, outputting an updated SECURITY.md with the verified results.

What is the best way to audit SECURITY.md for security documentation coverage?▼

Auditing SECURITY.md for coverage involves validating documented threat mitigations against phase execution artifacts to ensure consistency, preserving workflow gates while executing end-to-end security verification.

Can I generate security documentation from PLAN.md if SECURITY.md is missing?▼

Yes, you can generate security documentation from PLAN.md if SECURITY.md is missing by reconstructing mitigation verification from available threat-model artifacts and outputting a new SECURITY.md based on the detected phase state.

Does phase security verification work for unfinished project phases?▼

Phase security verification does not work for unfinished phases; it detects unexecuted phases and exits with guidance rather than guessing, ensuring threat mitigations are only retroactively validated for completed workflows.

How do I maintain workflow gates during a post-completion security review?▼

Maintaining workflow gates during a post-completion security review requires the verification process to preserve existing gates while auditing mitigations across multiple project phases where evidence may be partially recorded.

Related Skills

Explore More Software Engineering Skills→
hadpadrahulhadpadrahul

gsd-secure-phase

Audit threat mitigations in SECURITY.md or PLAN.md and update SECURITY.md.

Community
Advanced
deerawandeerawan
1

gsd-secure-phase

Audit completed phase threat mitigations and update SECURITY.md.

Community
Intermediate
D0NMEGAD0NMEGA
8

gsd-secure-phase

Verify threat mitigations for completed phases and update SECURITY.md.

Community
Intermediate
Chang-Shih-YungChang-Shih-Yung

health

Aggregate type checker, linter, and test results into a 0-10 composite score.

Community
Advanced