| name | gsd-secure-phase |
| description | Retroactively verify threat mitigations for a completed phase |
| argument-hint | [phase number] |
| allowed-tools | Read, Write, Edit, Bash, Glob, Grep, Task, AskUserQuestion |
Verify threat mitigations for a completed phase. Three states:
- (A) SECURITY.md exists — audit and verify mitigations
- (B) No SECURITY.md, PLAN.md with threat model exists — run from artifacts
- (C) Phase not executed — exit with guidance
Output: updated SECURITY.md.
<execution_context>
@.github/get-shit-done/workflows/secure-phase.md
</execution_context>
Phase: $ARGUMENTS — optional, defaults to last completed phase.
Execute @.github/get-shit-done/workflows/secure-phase.md.
Preserve all workflow gates.