speckit-security-review-audit

A security audit for release validation checks vulnerabilities across access control, misconfiguration, supply chain, and injection. This Skill performs that comprehensive review and generates prioritized remediation tasks mapped to OWASP Top 10 and CWE.

Changed-file driven scoping for threat modeling automatically detects modified files to focus security findings on the most relevant audit surface. It executes changed-file detection via the Spec-Kit script when no explicit file list is provided.

Yes, you can audit specific architecture trust boundaries by providing aspect or file constraints to limit the security review scope. This focuses findings on targeted DevSecOps controls without executing full codebase analysis.

OWASP Top 10 vulnerability mapping generates actionable remediation tasks by producing structured findings with CWE mappings and creating Spec-Kit compatible follow-up items. This drives your backlog by translating security risks into prioritized development tasks.

Automated dependency risk and supply chain reviews are limited by detected changed files or provided constraints, focusing findings on the defined audit surface. They validate DevSecOps controls but require file scoping to function effectively.