speckit-security-review-staged

What problem does it solve?

It helps you focus a security review on exactly what is going to be committed, reducing noise from unrelated parts of the codebase and making security checks faster and more actionable.

Core Features & Use Cases

• Staged-only security review: Reviews only changes in the git index (cached/staged) instead of the entire repository.
• Change-driven scope detection: Detects changed files via Spec-Kit’s workflow scripts to determine the audit set.
• Security domain coverage: Evaluates diffs for injection risks, hardcoded secrets/credentials, auth/access-control gaps, insecure crypto, misconfiguration, validation failures, and dependency/supply-chain concerns.
• Spec-Kit compatible reporting: Produces findings with severity, location, OWASP category, CWE IDs, CVSS guidance, and remediation backlogs.

Quick Start

Run the staged security review for your current commit scope so the AI audits only what you are about to push.