speckit-security-review-audit

A security audit assesses repository changes against OWASP Top 10 guidelines to identify access-control flaws, injection risks, and architecture issues. It produces structured findings with severity ratings, exploit scenarios, and remediation guidance for engineering teams.

Threat modeling and vulnerability analysis in code review evaluate exploitability of security risks in changed files. They assess attack scenarios, identify missing DevSecOps controls, and provide remediation references based on secure coding practices.

Generating security remediation tasks from a pull request scan involves evaluating changed files for vulnerabilities and producing task-ready items. The output includes prioritized engineering tasks with remediation guidance and architecture security constraints for planning workflows.

Yes, this security audit applies to full-project reviews, pull-request scans, and scoped assessments of changed files. It evaluates repositories against OWASP Top 10, secure coding practices, and DevSecOps configuration issues regardless of review scope.

Assessing exploitability of code risks during a security audit involves evaluating identified vulnerabilities against OWASP-based analysis to determine severity. It generates structured findings with exploit scenarios, remediation guidance, and security constraint outputs.

Yes, Spec-Kit task generation converts security review findings into task-ready remediation items and architecture security constraints. This allows security leads to turn identified access-control or injection risks into prioritized engineering tasks for planning workflows.