Agent skill · security · aiskillstore
security-requirement-extraction
Derive security requirements from threat models and business context. Use when translating threats into actionable requirements, creating security user stories, or building security test cases.
Why this skill is useful
Provides a structured approach to derive actionable security requirements from threat models, which the AI wouldn't reliably generate on its own.
What it needs
About 7k tokens when loaded. Last updated 2026-08-07. 405 stars on the source repository.
What this skill does
Security Requirement Extraction Transform threat analysis into actionable security requirements. When to Use This Skill Converting threat models to requirements Writing security user stories Creating security test cases Building security acceptance criteria Compliance requirement mapping Security architecture documentation Core Concepts 1. Requirement Categories 2. Security Requirement Types Type Focus Example ------ ------- --------- Functional What system must do "System must authenticate users" Non-functional How system must perform "Authentication must complete in <2s" Constraint Limitations imposed "Must use approved crypto libraries" 3. Requirement Attributes Attribute Description ----------- ------------- Traceability Links to threats/compliance Testability Can be verified Priority Business importance Risk Level Impact if not met Templates Template 1: Security Requirement Model Template 2: Threat-to-Requirement Extractor Template 3: Compliance Mapping Template 4: Security User Story Generator `python class SecurityUserStory
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills aiskillstore/security-requirement-extraction--71115b