Speckit Workflow V2 — Security skill for Claude Code
Full Spec Kit flow with quality gates: constitution→specify→clarify→plan→contract→checklist→tasks→analyze→implement.
How to install Speckit Workflow V2
Installs to ~/.claude/commands/jmanhype-speckit-speckit-workflow-v2.md
mkdir -p ~/.claude/commands && curl -fsSL https://raw.githubusercontent.com/jmanhype/speckit/HEAD/.claude/commands/speckit-workflow-v2.md -o ~/.claude/commands/jmanhype-speckit-speckit-workflow-v2.md Restart Claude Code, or start a new session, for it to be picked up.
What Speckit Workflow V2 does
description: "Full Spec Kit flow with quality gates: constitution→specify→clarify→plan→contract→checklist→tasks→analyze→implement. Usage: /speckit-workflow-v2 [--domains 'security,accessibility,performance'] [--strict] [--auto] [--parallel]"
Purpose: Orchestrate ALL major Spec Kit features—including domain checklists and contract-driven development—via SlashCommand without manual chaining.
Tools: Bash only for sanity checks; the heavy lifting is done by slash commands the agent i
Alternatives in Security
- Defense In Depth — Implement multi-layered testing and security best practices 98.1k ★
- Commit Hook Checklist — Audit commit-hook automation as gates against AI slop and broken commits (Node.js, Go, polyglot) 168 ★
- Release Audit — Use right before cutting a release — it spawns ONE fresh sibling session via CCC that audits only the JUDGMENT 130 ★
Full documentation available on GitHub
View Source RepositoryRelated Skills
Twin Sparrow Oppus Reasoning Contract
Enforce disciplined reasoning structure for research, architecture, audit, spec review, implementation plannin
Audit Plan
Dispatch the plan-reviewer sub-agent to audit the active feature's spec.md and plan.md against PLANNING.md and
Sc Analyze
Comprehensive code analysis across quality, security, performance, and architecture domains
Solidity Security
Master smart contract security best practices to prevent common vulnerabilities and implement secure Solidity
App Doctor
Audit any web app's security (39-point checklist) AND launch-readiness (legal, auth, polish, retention), repor
Attack Surface
External attack-surface / recon audit of domains YOU OWN (your sites + subdomains, client sites under contract
Related Agents
Ccd Speckit Orchestrator
Use this agent to coordinate a multi-phase GitHub Spec Kit run — constitution, specify, clarify, checklist, pl
Autopilot
Autonomous pipeline from idea to working code — specify, clarify, plan, review, tasks, implement, code review,
Amby PM
Product Manager — AmbyKit role for specify/clarify/revise; use for that perspective.