Retroactively verify threat mitigations for a completed phase
Free account. Installing gives you the manifest plus copy-paste snippets.
See reviewsImported from davepoon/buildwithclaude (
plugins/gsd/skills/secure-phase/SKILL.md). Install upstream withnpx skills add davepoon/buildwithclaude --skill secure-phase. Copyright stays with the author.
Output: updated SECURITY.md.
<execution_context> @${CLAUDE_PLUGIN_ROOT}/workflows/secure-phase.md </execution_context>
Copy one of these into your project. Installing also returns the manifest and these snippets.
# after Install: the listing is in your workspace's routing pool - a plan picks it for its slot
curl -s -X POST https://api.opensmartroute.ai/api/v1/route -H 'Authorization: Bearer $OSR_API_KEY' -H 'Content-Type: application/json' -d '{"text": "...", "plan": true}'An Open Capability Manifest: the router reads it to know what this does, what it costs and when to pick it.
{
"ocm": "1",
"id": "davepoon-buildwithclaude-secure-phase",
"kind": "skill",
"name": "gsd:secure-phase",
"description": "Retroactively verify threat mitigations for a completed phase",
"publisher": "davepoon",
"version": "1.0.0",
"capabilities": {
"domains": [
"general"
],
"tags": [
"skill-md",
"skills-sh"
],
"languages": [
"en"
]
},
"quality_prior": 0.6,
"examples": [
"Retroactively verify threat mitigations for a completed phase"
],
"primary": false,
"metadata": {
"source": {
"provider": "skills.sh",
"repository": "https://github.com/davepoon/buildwithclaude",
"path": "plugins/gsd/skills/secure-phase/SKILL.md",
"ref": "HEAD",
"url": "https://github.com/davepoon/buildwithclaude/blob/HEAD/plugins/gsd/skills/secure-phase/SKILL.md",
"key": "davepoon/buildwithclaude/plugins/gsd/skills/secure-phase/SKILL.md"
},
"allowed_tools": [
"Read",
"Write",
"Edit",
"Bash",
"Glob",
"Grep",
"Task",
"AskUserQuestion"
]
},
"instructions": "<objective>\nVerify threat mitigations for a completed phase. Three states:\n- (A) SECURITY.md exists — audit and verify mitigations\n- (B) No SECURITY.md, PLAN.md with threat model exists — run from artifacts\n- (C) Phase not executed — exit with guidance\n\nOutput: updated SECURITY.md.\n</objective>\n\n<execution_context>\n@${CLAUDE_PLUGIN_ROOT}/workflows/secure-phase.md\n</execution_context>\n\n<context>\nPhase: $ARGUMENTS — optional, defaults to last completed phase.\n</context>\n\n<process>\nExecute @${CLAUDE_PLUGIN_ROOT}/workflows/secure-phase.md.\nPreserve all workflow gates.\n</process>",
"cost": {
"context_tokens": 145
}
}Fetch it by URL: GET /api/v1/registry/davepoon-buildwithclaude-secure-phase/manifest?version=1.0.0
Star ratings from people who tried it. One review per account; edit yours any time.
No reviews yet. Install it, try it, and be the first to rate it.