speckit-security-review-audit

What problem does it solve?

This Skill helps you perform a comprehensive security review of an entire codebase (or a clearly defined set of changed files) so you can catch vulnerabilities, architecture risks, and missing controls before milestone or release decisions.

Core Features & Use Cases

• Broader/full security review: Validates security posture across multiple domains such as access control, misconfiguration, supply chain, injection, authentication, and cryptographic usage.
• Changed-file driven scoping: Automatically detects changed files (when no explicit list is provided) and focuses findings on the most relevant audit surface.
• Spec-Kit actionable output: Produces findings with OWASP/CWE mappings and generates Spec-Kit compatible remediation tasks to drive backlog follow-up.

Quick Start

Run the speckit-security-review-audit skill on the current repository to audit security risks across the codebase and generate prioritized, actionable remediation tasks.