version: "1.0.0" name: gsd-secure-phase description: "Retroactively verify threat mitigations for a completed phase" argument-hint: "[phase number]" allowed-tools:
- Read
- Write
- Edit
- Bash
- Glob
- Grep
- Task
- AskUserQuestion
<objective> Verify threat mitigations for a completed phase. Three states:
- (A) SECURITY.md exists — audit and verify mitigations
- (B) No SECURITY.md, PLAN.md with threat model exists — run from artifacts
- (C) Phase not executed — exit with guidance
Output: updated SECURITY.md. </objective>
<execution_context> @~/.claude/get-shit-done/workflows/secure-phase.md </execution_context>
<context> Phase: $ARGUMENTS — optional, defaults to last completed phase. </context>
<process> Execute @~/.claude/get-shit-done/workflows/secure-phase.md. Preserve all workflow gates. </process>