speckit-security-review-init

What problem does it solve?

This Skill helps you create or refine a single, authoritative Security Constitution so security audits have consistent trust boundaries, authentication standards, and enforceable rules.

Core Features & Use Cases

• Detects existing security rule files and decides whether to refine, migrate, or start discovery.
• Runs a Security Discovery Interview to gather trust boundaries, identity and access model, data sensitivity/compliance needs, and secrets/infrastructure requirements.
• Generates a structured constitution document at .specify/memory/security_constitution.md with enforceable, audit-ready guardrails.

Quick Start

Ask the AI to run speckit-security-review-init to initialize or update .specify/memory/security_constitution.md using your project’s current constitution and security requirements.