speckit-security-review-tasks

Security review of Spec-Kit task lists involves checking for explicit authentication, authorization, validation, logging, secrets handling, and hardening tasks. It also verifies safe task sequencing and missing implementation dependencies before work begins.

Task sequencing analysis in implementation planning verifies that risky work is ordered safely, ensuring secure foundations and tests are placed before dependent implementation begins. It prevents unsafe sequencing from causing costly rework during development.

To ensure specs include abuse-case tests, planning artifacts and task lists are compared against architecture context to confirm the implementation plan preserves intent. This consistency check identifies missing negative tests and late-stage security work early.

Yes, this security review works with repository memory context, research notes, specs, and contracts. It compares task lists against these planning artifacts to confirm the implementation plan preserves architectural intent and includes necessary hardening steps.

You need to check implementation dependencies for unsafe ordering before work begins, especially when risky tasks are involved. This ensures secure foundations and tests are placed prior to dependent implementation to prevent costly rework.