speckit-security-review-apply

Name: speckit-security-review-apply
Availability: InStock
Author: Numu

Apply approved security follow-up items into Spec-Kit planning artifacts.

2|Updated Jan 6, 2026

Search Tags:#backlog #spec-kit #security-review #technical-debt #task-triage #plan-updates

Ready to run

npx skills add https://github.com/NUMU-IO/NUMU-api --skill speckit-security-review-apply-numu-io

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: speckit-security-review-apply
Source: https://github.com/NUMU-IO/NUMU-api/tree/main/.agents/skills/speckit-security-review-apply
Command: npx skills add https://github.com/NUMU-IO/NUMU-api --skill speckit-security-review-apply-numu-io

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill turns approved security review findings into concrete Spec-Kit planning updates, so teams can respond to risks without rewriting their broader implementation.

Core Features & Use Cases

Backlog Integration: Adds or updates security tasks in tasks.md while preserving existing structure and numbering.
Plan Correction: Updates plan.md only when a security decision or sequencing rule truly needs to change.
Reviewable Follow-Through: Keeps deferred items visible as technical debt and documents what was changed for traceability.
Use Case: A security reviewer approves three follow-up items, and you want them translated into the project backlog with minimal disruption.

Quick Start

Ask the skill to apply the latest approved security follow-up items into the appropriate Spec-Kit planning files.

Frequently Asked Questions about speckit-security-review-apply

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I add security findings to a project backlog without disrupting existing tasks?▼

Spec-Kit security review backlog updates prioritize adding or updating tasks in tasks.md to preserve structure and numbering. Plan.md is modified only when a security decision or sequencing rule truly requires correction.

When do I need to update plan.md for a technical debt security item?▼

Update plan.md only when a security decision or sequencing rule truly requires correction. Deferred security items remain visible as tracked technical debt within tasks.md to preserve reviewability.

How does security triage work with Spec-Kit planning artifacts?▼

Security triage translates approved findings into concrete Spec-Kit planning updates by creating tasks and adjusting sequencing. It targets .specify repository memory notes while preserving formatting and reviewability.

Can I track deferred security vulnerabilities as technical debt in tasks.md?▼

Yes, deferred security vulnerabilities can be tracked as technical debt in tasks.md. The process keeps deferred items visible within the backlog and documents changes for traceability and reviewable follow-through.

What is the best way to sequence security tasks in an existing backlog?▼

The best way to sequence security tasks is favoring tasks.md updates over plan.md corrections. This preserves numbering style, maintains reviewability, and ensures minimal scoped changes to existing backlog records.