Ready to supercharge your AI agents?

Install any skill in seconds. Free to start, no credit card required.

Get Started Free →

Open Gsd/Gsd Secure Phase — measured AI agent skill | DecimalAI

open-gsd/gsd-secure-phase

NewSkillScoreMaintained

Retroactively verify threat mitigations for a completed phase

by open-gsd

Links this skill to your agents and keeps it current with the author’s updates.

Automatic

Security & AppSec pack

decimalai skills pull open-gsd-gsd-secure-phase

Get this skill — curl · raw file

curl -fsSL https://app.decimal.ai/s/open-gsd-gsd-secure-phase/SKILL.md

Raw file: /s/open-gsd-gsd-secure-phase/SKILL.md ↗ · machine-readable summary at /s/open-gsd-gsd-secure-phase.json ↗

In productionGlobal

how this skill behaves on real traffic · last 30 days

No production data for this skill yet — usage numbers appear here once agents start running it.

Anonymized aggregate across every org using this skill — proof from real production use, not a demo.

Does this skill help? · Benchmark: with vs. withoutsign in to run this on your agents

22 test cases from the publisher’s eval.yaml · each run twice on gemini-3.6-flash — with the skill injected, then without · last run 3d ago

—+23% tokens0% turns27% of whole cases pass with skill (6/22)

Test case	Without → With	Effect	Δ tokens	Δ turns
case-03	✗→✓	▲ Improved	29%	0%
case-10	✗→✓	▲ Improved	46%	0%
case-13	✗→✓	▲ Improved	16%	0%
case-14	✗→✓	▲ Improved	-1%	0%
case-15	✗→✓	▲ Improved	-35%	0%

Showing 5 of 22 cases

SkillSafety

✓ 3 of 3 passed

Code scan15 of 15 checks clean

0 critical · 0 warning · 0 info — scanner v4 — 8/3/2026

live_secretremote_code_executionreverse_shelldata_exfiltrationssrf_metadataagent_snoopinganti_refusaldestructive_commandsobfuscated_unicodeunicode_homoglyphopaque_blobsuspicious_urltool_overreachtrigger_abuseprompt_injection_phrasing

IntentSafe

LLM judge · does the skill do what it claims

ContentClean

LLM judge · policy & harmful-content review

Source

Imported

open-gsd / gsd-core

skills/gsd-secure-phase/SKILL.md

View on GitHub ↗

License MITImported 8/3/2026Version v1

Skill contents

SKILL.md

<objective> Verify threat mitigations for a completed phase. Three states:

(A) SECURITY.md exists — audit and verify mitigations
(B) No SECURITY.md, PLAN.md with threat model exists — run from artifacts
(C) Phase not executed — exit with guidance

Output: updated SECURITY.md. </objective>

<execution_context> @~/.claude/gsd-core/workflows/secure-phase.md </execution_context>

<context> Phase: $ARGUMENTS — optional, defaults to last completed phase. </context>

<process> Execute end-to-end. Preserve all workflow gates. </process>

Want to see if open-gsd/gsd-secure-phase would activate on your phrasing? Try it before you install — no LLM call, no signup.

Other measured skills in the registry, with their headline benchmark lift.