speckit-security-review-tasks

Review Spec-Kit task artifacts for insecure sequencing and missing security coverage.

Updated Mar 16, 2026
One-click install
npx skills add https://github.com/B0yZ4kr14/OrthoPlus-Enterprise --skill speckit-security-review-tasks
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: speckit-security-review-tasks
Source: https://github.com/B0yZ4kr14/OrthoPlus-Enterprise/tree/main/.specify-backups/20260518-141826/_agents/skills/speckit-security-review-tasks
Command: npx skills add https://github.com/B0yZ4kr14/OrthoPlus-Enterprise --skill speckit-security-review-tasks

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

It prevents security gaps and unsafe implementation sequencing by reviewing how Spec-Kit tasks are planned, ordered, and security-covered before work begins.

Core Features & Use Cases

  • Task sequencing and dependency review: Checks whether higher-risk or foundational security work happens early and whether dependencies don’t bury security later.
  • Security coverage verification: Ensures tasks exist for authentication, authorization, validation, logging, secrets handling, and hardening, including negative and abuse-case testing.
  • Plan-memory alignment: Compares task artifacts against the Spec-Kit memory hub and related planning artifacts to preserve intent and architecture decisions.

Quick Start

Ask the skill to review the current Spec-Kit task list for the active feature before implementation begins, providing any required $ARGUMENTS to target the correct artifacts.

Frequently Asked Questions about speckit-security-review-tasks

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I validate Spec-Kit task sequencing for security coverage before implementation?

To validate Spec-Kit task sequencing, review task artifacts like tasks.md and plan.md against the memory hub to identify insecure dependency ordering and missing security coverage before coding begins, ensuring foundational work happens early.

What is included in a Spec-Kit security review for task plans?

A Spec-Kit security review verifies task sequencing, dependency ordering, and coverage for authentication, authorization, validation, logging, secrets handling, hardening, and negative abuse-case testing across project structures.

How do I check if my Spec-Kit tasks cover authentication and abuse cases?

Check authentication and abuse case coverage by reviewing Spec-Kit task artifacts to ensure specific tasks exist for security validation and negative test inclusion, verifying alignment against the memory hub.

Does Spec-Kit security review require access to memory hub context?

Yes, Spec-Kit security review requires access to the memory hub context to verify tasks.md and plan.md artifacts, preserving architecture decisions and intent through optimizer-aware context preparation when enabled.

What's the best way to prevent insecure task sequencing in a Spec-Kit project?

Prevent insecure task sequencing by reviewing Spec-Kit task plans before implementation, checking that higher-risk foundational security work happens early and dependencies do not bury security tasks later in the workflow.

Why does my Spec-Kit plan-memory alignment fail during security task validation?

Plan-memory alignment fails when task artifacts diverge from the Spec-Kit memory hub, losing architecture decisions; review tasks.md and plan.md against memory artifacts to restore intent and verify security coverage.