speckit-security-review-apply

What problem does it solve?

It turns approved security review follow-up items into concrete Spec-Kit backlog updates, so teams can move from findings to implementable work without disrupting the existing planning flow.

Core Features & Use Cases

• Backlog application without refactors: Applies approved follow-ups by updating tasks.md and only updating plan.md when security sequencing or decisioning truly requires it.
• Context-aware artifact selection: Works with the optimizer-aware memory flow when available, or falls back to a Markdown-only reading strategy for key planning artifacts.
• Safety checks on coverage and priority: Avoids duplicating already-covered tasks, preserves task numbering/formatting, and keeps high-severity items prioritized.
• Dry-run support: If asked for a preview, it produces proposed changes without editing files.

Quick Start

Run the skill with the latest approved security follow-up plan (or recent security review findings) as the input so it updates your Spec-Kit tasks.md and, when needed, plan.md to reflect the approved security decisions.