What problem does it solve? Translating threat models into concrete, testable security requirements is slow and inconsistent, often leaving gaps between identified threats and implemented controls. This Skill converts STRIDE-based threat analysis into structured security requirements with acceptance criteria, test cases, and compliance mappings. ## Core Features & Use Cases - Threat-to-Requirement Extraction: Maps STRIDE threat categories (spoofing, tampering, repudiation, information disclosure, denial of service, elevation of privilege) to security domains and generates prioritized requirements with rationale and traceability. - Security User Stories & Test Cases: Generates user stories, epics, acceptance criteria, and security test specifications ready for agile backlogs. - Compliance Mapping: Maps requirements to PCI DSS, HIPAA, GDPR, and OWASP ASVS controls, producing traceability matrices and gap analyses. - Use Case: After completing a threat model for a payment API, feed the identified threats into this Skill to produce a full requirement set with priorities, test cases, and a PCI DSS compliance matrix. ## Quick Start Analyze the threats from my threat model and generate prioritized security requirements with acceptance criteria, test cases, and OWASP compliance mappings.
