speckit-security-review-staged

Review staged git changes for security vulnerabilities by analyzing the git diff --cached output to detect injection, secrets, and access control issues, producing severity-ranked findings with OWASP mapping and remediation steps.

Uncommitted working-tree diffs are audited for injection, secrets, authorization gaps, cryptographic issues, misconfiguration, and supply-chain risks, generating actionable findings mapped to OWASP categories with prioritized remediation plans.

Generate an OWASP mapped security report for staged code by running a changed-files detection script and inspecting the staged diff, which yields severity-ranked findings with locations and remediation guidance.

Yes, you can audit only the staged diff or current uncommitted scope instead of the whole repository, targeting security checks specifically across authentication, injection, secrets, and access control scenarios.

Yes, this security review works with spec-kit repositories by executing a changed-files detection script to inspect git index changes and uncommitted working-tree diffs for targeted vulnerability analysis.

Prioritize security remediation for staged git changes by reviewing the severity-ranked findings report, which provides locations, OWASP category mapping, and a prioritized action plan for detected vulnerabilities.