speckit-security-review-plan

Name: speckit-security-review-plan
Availability: InStock
Author: Numu

Review Spec-Kit planning artifacts for security weaknesses before implementation.

2|Updated Jan 6, 2026

Search Tags:#architecture #threat modeling #security review #spec-kit #secure design #plan artifacts

Ready to run

npx skills add https://github.com/NUMU-IO/NUMU-api --skill speckit-security-review-plan-numu-io

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: speckit-security-review-plan
Source: https://github.com/NUMU-IO/NUMU-api/tree/main/.agents/skills/speckit-security-review-plan
Command: npx skills add https://github.com/NUMU-IO/NUMU-api --skill speckit-security-review-plan-numu-io

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill reviews Spec-Kit planning documents before implementation and flags security gaps, unsafe assumptions, and ambiguous decisions that could become costly later.

Core Features & Use Cases

Plan Artifact Review: Examines plan.md, spec.md, research.md, data-model.md, contracts, quickstart.md, and related memory notes.
Secure-by-Design Checks: Evaluates authentication, authorization, trust boundaries, privacy, logging, validation, secrets handling, and deployment hardening.
Use Case: A team preparing a new feature can run this Skill on their plan package to catch missing security requirements before code is written.

Quick Start

Ask the skill to review the active Spec-Kit plan artifacts for security gaps before implementation begins.

Frequently Asked Questions about speckit-security-review-plan

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I review planning artifacts for security weaknesses before implementation begins?▼

To review planning artifacts for security weaknesses, examine Spec-Kit documents like plan.md, spec.md, and data-model.md to identify trust boundaries, authorization gaps, and unsafe assumptions before writing code.

What is a secure-by-design assessment for architecture planning?▼

A secure-by-design assessment for architecture planning evaluates authentication, data flow, validation, and deployment hardening across planning documents to flag vulnerabilities and ambiguous decisions early in the development lifecycle.

How do I catch missing security requirements in a feature spec or data model?▼

To catch missing security requirements in a feature spec or data model, run a security review on plan artifacts to generate a report detailing vulnerabilities, confirmed secure patterns, and missing deployment hardening.

Can I use threat modeling on Spec-Kit contracts and quickstart documents?▼

Yes, you can apply threat modeling to Spec-Kit contracts and quickstart documents to evaluate trust boundaries, secrets handling, and logging mechanisms to ensure secure design principles are met before implementation.

What is the best way to check trust boundaries and data flow in planning documents?▼

The best way to check trust boundaries and data flow in planning documents is to review the complete plan package against secure design criteria, isolating vulnerabilities and unsafe dependencies before development starts.