skills.rest
gesmith0606
gesmith0606COMMUNITY
Explore all skills by this author →
GitHub

gsd-secure-phase

Audit threat mitigations for completed phases and update SECURITY.md.

Updated Aug 15, 2025
Search Tags:#automation#compliance#workflows#mitigation#security-audit#threat#phase-review
One-click install
npx skills add https://github.com/gesmith0606/nfl_data_engineering --skill gsd-secure-phase-gesmith0606
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: gsd-secure-phase
Source: https://github.com/gesmith0606/nfl_data_engineering/tree/main/.claude/skills/gsd-secure-phase
Command: npx skills add https://github.com/gesmith0606/nfl_data_engineering --skill gsd-secure-phase-gesmith0606

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Retroactively verify threat mitigations for a completed phase to ensure security controls and governance requirements are met.

Core Features & Use Cases

  • Audit threat mitigations for a completed phase by validating the presence and correctness of threat-model artifacts.
  • Run from artifacts when SECURITY.md is absent but PLAN.md with a threat model exists.
  • Exit with guided remediation steps if the phase has not yet been executed to prevent unresolved risks.

Quick Start

Run the secure-phase workflow on the current phase artifacts to verify mitigations and update SECURITY.md accordingly.

Frequently Asked Questions about gsd-secure-phase

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I verify threat mitigations for a completed project phase?▼

To verify threat mitigations for a completed phase, audit the phase artifacts against your security requirements. This checks if threat-model artifacts are present and correct, then updates SECURITY.md to reflect compliance.

What happens if I run a security audit without a SECURITY.md file?▼

If SECURITY.md is absent, the security audit runs from artifacts by checking for a PLAN.md containing a threat model. If neither exists, it exits with guided remediation steps.

Can I audit threat mitigations if the project phase has not been executed yet?▼

You cannot audit threat mitigations for an unexecuted phase. The process exits with guidance to prevent unresolved risks, ensuring you only verify phases with actual artifacts.

How does a phase review update my security compliance documentation?▼

A phase review updates security compliance documentation by preserving all workflow gates and writing the verification results directly into SECURITY.md as part of the audit process.

When do I need to audit threat mitigations from PLAN.md artifacts?▼

You need to audit threat mitigations from PLAN.md artifacts when SECURITY.md is missing but a threat model exists in PLAN.md, allowing you to validate security controls retroactively.

Related Skills

Explore More Legal & Compliance Skills→
yusaduymazyusaduymaz

gsd-secure-phase

Verify implemented threat mitigations in completed GSD phase artifacts.

Community
Advanced
jedmamostojedmamosto

gsd-secure-phase

Verify phase threat mitigations and update SECURITY.md from PLAN.md artifacts.

Community
Intermediate
archonai-labarchonai-lab
1

security-compliance

Delivers enterprise-grade threat modeling and secure SDLC workflows with a 30%+ reduction in reported vulnerabilities.

Official
Advanced
jnPiyushjnPiyush

code-review-and-audit

Automate code review, security audits, and compliance verification in CI/CD pipelines.

Community
Advanced