skills.rest
NorkzYT
NorkzYTCOMMUNITY
Explore all skills by this author →
GitHub

security-requirement-extraction

Convert STRIDE threat data into structured security requirements, user stories, and test specifications.

2|2|Updated Jan 21, 2026
Search Tags:#compliance#traceability#threat-modeling#risk-management#security-testing#security-requirements
One-click install
npx skills add https://github.com/NorkzYT/claude-code-autopilot --skill security-requirement-extraction-norkzyt
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-requirement-extraction
Source: https://github.com/NorkzYT/claude-code-autopilot/tree/main/.claude/skills/security-requirement-extraction
Command: npx skills add https://github.com/NorkzYT/claude-code-autopilot --skill security-requirement-extraction-norkzyt

SYSTEM DOCUMENTATION & REQUIREMENTS

## What problem does it solve? Threat modeling yields abstract security concerns. This skill translates those threats into concrete, testable security requirements with traceability to the underlying risks.

## Core Features & Use Cases

  • Threat-to-requirement mapping: converts STRIDE threats into actionable requirements with priorities.
  • Auto-generation of user stories and test specs: produces structured narratives and verification criteria.
  • Compliance-ready traceability: links requirements to threats, risk levels, and applicable controls.

### Quick Start Provide threat inputs (id, category, title, description, target, impact, likelihood) and a project name, then call the extractor to produce a Security Requirements Set. Example: threats = [ThreatInput(...)] ; extractor.extract_requirements(threats, "MyProject").

Frequently Asked Questions about security-requirement-extraction

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I convert STRIDE threat modeling data into testable security requirements?▼

To convert STRIDE threat modeling data into testable security requirements, you provide threat inputs like category, description, impact, and likelihood to generate a structured Security Requirements Set with traceable priorities.

What is the best way to map security threats to compliance controls and user stories?▼

Mapping security threats to compliance controls involves translating threat analysis into structured user stories and test specifications, ensuring risk-based prioritization and direct traceability to applicable compliance controls.

How do I generate security test specifications from a threat modeling analysis?▼

Generating security test specifications from threat modeling requires inputting threat data such as target and impact, which then automatically produces structured narratives and verification criteria for security testing.

Can I prioritize security requirements based on risk levels extracted from threat data?▼

You can prioritize security requirements based on risk levels by feeding threat likelihood and impact data into the extractor, which outputs a prioritized Security Requirements Set aligned with your specific project.

What input format is needed to extract structured security requirements from threats?▼

Extracting structured security requirements requires threat inputs containing specific fields: id, category, title, description, target, impact, and likelihood, along with a designated project name to generate traceable outputs.

Related Skills

Explore More Software Engineering Skills→
josemlopezjosemlopez
8

tm-tests

Generate security test cases from threat models in Markdown, Jest, Pytest, or Playwright formats.

Community
Intermediate
proffesor-for-testingproffesor-for-testing
436

shift-left-testing

Generate and execute unit, integration, and end-to-end tests within CI/CD workflows.

Community
Advanced
banjoeybanjoey

Security

Generate STRIDE threat models and map CMMC compliance baselines for PAI projects.

Community
Advanced
jnPiyushjnPiyush

code-review-and-audit

Automate code review, security audits, and compliance verification in CI/CD pipelines.

Community
Advanced