skills.rest
NUMU-IO
NUMU-IOOFFICIAL
Explore all skills by this author →
WebsiteGitHub

speckit-security-review-apply

Apply approved security follow-up items into Spec-Kit planning artifacts.

2|Updated Jan 6, 2026
Search Tags:#backlog#spec-kit#security-review#technical-debt#task-triage#plan-updates
One-click install
npx skills add https://github.com/NUMU-IO/NUMU-api --skill speckit-security-review-apply-numu-io
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: speckit-security-review-apply
Source: https://github.com/NUMU-IO/NUMU-api/tree/main/.agents/skills/speckit-security-review-apply
Command: npx skills add https://github.com/NUMU-IO/NUMU-api --skill speckit-security-review-apply-numu-io

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill turns approved security review findings into concrete Spec-Kit planning updates, so teams can respond to risks without rewriting their broader implementation.

Core Features & Use Cases

  • Backlog Integration: Adds or updates security tasks in tasks.md while preserving existing structure and numbering.
  • Plan Correction: Updates plan.md only when a security decision or sequencing rule truly needs to change.
  • Reviewable Follow-Through: Keeps deferred items visible as technical debt and documents what was changed for traceability.
  • Use Case: A security reviewer approves three follow-up items, and you want them translated into the project backlog with minimal disruption.

Quick Start

Ask the skill to apply the latest approved security follow-up items into the appropriate Spec-Kit planning files.

Frequently Asked Questions about speckit-security-review-apply

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I add security findings to a project backlog without disrupting existing tasks?▼

Spec-Kit security review backlog updates prioritize adding or updating tasks in tasks.md to preserve structure and numbering. Plan.md is modified only when a security decision or sequencing rule truly requires correction.

When do I need to update plan.md for a technical debt security item?▼

Update plan.md only when a security decision or sequencing rule truly requires correction. Deferred security items remain visible as tracked technical debt within tasks.md to preserve reviewability.

How does security triage work with Spec-Kit planning artifacts?▼

Security triage translates approved findings into concrete Spec-Kit planning updates by creating tasks and adjusting sequencing. It targets .specify repository memory notes while preserving formatting and reviewability.

Can I track deferred security vulnerabilities as technical debt in tasks.md?▼

Yes, deferred security vulnerabilities can be tracked as technical debt in tasks.md. The process keeps deferred items visible within the backlog and documents changes for traceability and reviewable follow-through.

What is the best way to sequence security tasks in an existing backlog?▼

The best way to sequence security tasks is favoring tasks.md updates over plan.md corrections. This preserves numbering style, maintains reviewability, and ensures minimal scoped changes to existing backlog records.

Related Skills

Explore More Software Engineering Skills→
B0yZ4kr14B0yZ4kr14

speckit-security-review-apply

Apply approved security review follow-ups to Spec-Kit tasks.md and plan.md.

Community
Intermediate
xloxn69xloxn69
7

acceptance-criteria-generator

Convert plain-English requirements into structured Given/When/Then acceptance criteria.

Community
Basic
a2musa2mus

speckit-checklist

Generate quality checklists for spec-kit requirements with traceability references.

Community
Advanced
pradeepmoulipradeepmouli
2

speckit-refine-propagate

Propagate refined specifications to plan.md and tasks.md while preserving existing content.

Community
Advanced