speckit-red-team-run

Analyze functional specifications for adversarial gaps and generate structured findings reports.

2|Updated Jan 6, 2026
One-click install
npx skills add https://github.com/NUMU-IO/NUMU-api --skill speckit-red-team-run-numu-io
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: speckit-red-team-run
Source: https://github.com/NUMU-IO/NUMU-api/tree/main/.agents/skills/speckit-red-team-run
Command: npx skills add https://github.com/NUMU-IO/NUMU-api --skill speckit-red-team-run-numu-io

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill performs an adversarial review of a functional specification before architecture is locked in, helping teams catch missing requirements, hidden risks, and ambiguous decisions early.

Core Features & Use Cases

  • Trigger-aware review: Detects whether a spec actually warrants red-team scrutiny and skips work when no relevant risk categories are present.
  • Lens-based analysis: Selects adversarial lenses from a catalog, supports explicit overrides, and keeps the review focused on the most relevant attack surfaces.
  • Structured findings workflow: Produces a session report with severity-ranked findings, resolution categories, and audit-friendly session metadata.
  • Safe resolution guidance: Distinguishes between forward-facing spec fixes, open questions, accepted risks, and out-of-scope items without modifying historical records.
  • Use Case: A product team is preparing to freeze a spec for a new marketplace feature and wants a rigorous pre-implementation review that surfaces contractual, multi-party, and compliance gaps before coding begins.

Quick Start

Ask the assistant to red-team the target spec file and generate a structured findings report with the most relevant lenses.

Frequently Asked Questions about speckit-red-team-run

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I perform an adversarial review of a functional specification?

Adversarial review of a functional specification applies trigger matching and lens selection to catch missing requirements and hidden risks before architecture lock-in. It generates a structured session report with severity-ranked findings and resolution categories.

What is red teaming a spec before architecture lock-in?

Red teaming a spec before architecture lock-in is an adversarial analysis process that identifies ambiguous decisions and compliance gaps. It uses a catalog of adversarial lenses to target specific attack surfaces, ensuring a rigorous pre-implementation review for contractual or multi-party risks.

How do I generate a structured findings report for a YAML functional spec?

Generating a structured findings report for a YAML functional spec requires YAML frontmatter discovery to extract session metadata. The review produces severity-ranked findings categorized into forward-facing spec fixes, open questions, accepted risks, and out-of-scope items for audit purposes.

When should I skip a red team review of a functional specification?

You should skip a red team review when trigger-aware analysis detects no relevant risk categories present in the functional specification. This mechanism avoids unnecessary work by evaluating whether the spec actually warrants adversarial scrutiny before proceeding with lens-based analysis.

Does red team spec review modify historical working records?

Red team spec review does not modify historical working records. It distinguishes between forward-facing spec fixes and open questions while maintaining audit-friendly session metadata, ensuring past resolution tracking and working documents remain untouched.

Can I override adversarial lenses during a spec review?

You can override adversarial lenses during a spec review by providing explicit selections. The lens-based analysis normally selects lenses from a catalog automatically, but explicit overrides keep the review focused on the most relevant attack surfaces for your specific functional spec.