speckit-security-review-export

To generate a whitebox security assessment report, you consolidate fragmented security review artifacts into a structured Markdown document featuring an executive summary, methodology, and categorized technical findings with remediation steps.

Mapping security findings to OWASP and CWE categories involves deduplicating entries and grouping risks by their respective classifications to produce a readable executive and technical report with clear severity, evidence, and impact analysis.

Yes, you can document architectural drift in a technical pentest report by appending systemic risk patterns that reflect deviations from the Security Constitution and memory-hub intent, providing enriched assessment context.

Generating a formal security review export requires prior security review artifacts, durable memory, and implementation context from your Spec-Kit project to accurately enrich the assessment and evidence-driven vulnerability documentation.

You structure a remediation roadmap by formatting each vulnerability finding with severity, OWASP/CWE mapping, evidence locations, exploit scenarios, and step-by-step remediation guidance compatible with plan-style workflows.