skills.rest
yusufcmg
yusufcmgCOMMUNITY
Explore all skills by this author →
GitHub

security-requirement-extraction

Generate security requirements, user stories, and test cases from threat models.

1|Updated Feb 19, 2026
Search Tags:#security#requirements#threat modeling#compliance#user stories#test cases
One-click install
npx skills add https://github.com/yusufcmg/Antigravity-Agents-Workflows --skill security-requirement-extraction-yusufcmg
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-requirement-extraction
Source: https://github.com/yusufcmg/Antigravity-Agents-Workflows/tree/main/.agent/skills/security/security-requirement-extraction
Command: npx skills add https://github.com/yusufcmg/Antigravity-Agents-Workflows --skill security-requirement-extraction-yusufcmg

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill automates the process of translating high-level threat models and business context into specific, actionable security requirements, user stories, and test cases.

Core Features & Use Cases

  • Threat-to-Requirement Mapping: Automatically generates security requirements based on identified threats (e.g., STRIDE categories).
  • User Story Generation: Creates security-focused user stories from requirements.
  • Test Case Generation: Develops initial test cases and acceptance criteria for each requirement.
  • Compliance Mapping: Maps generated requirements to relevant compliance frameworks (e.g., PCI DSS, HIPAA, GDPR).
  • Use Case: When a threat model identifies "Information Disclosure" risks related to customer data, this Skill can generate requirements like "Encrypt sensitive data at rest" and "Prevent information leakage from error messages," along with corresponding user stories and test cases.

Quick Start

Use the security requirement extraction skill to derive security requirements from the provided threat model document.

Frequently Asked Questions about security-requirement-extraction

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I translate threat models into actionable security requirements?▼

To translate threat models into actionable security requirements, provide the threat model document and business context to generate specific security requirements, user stories, and test cases automatically.

Can I map generated security requirements to compliance frameworks like PCI DSS and HIPAA?▼

Yes, you can map security requirements to compliance frameworks like PCI DSS, HIPAA, and GDPR, facilitating security architecture and compliance documentation by translating abstract threats into concrete, testable requirements.

How do I generate security user stories and test cases from identified threats?▼

Generate security user stories and test cases by inputting identified threats, such as STRIDE categories, to automatically create security-focused user stories with corresponding acceptance criteria and test cases.

What is the best way to automate threat-to-requirement mapping for security architecture?▼

Automate threat-to-requirement mapping by deriving security requirements from threat models and business context, producing testable requirements that facilitate security architecture and compliance documentation.

Does this security requirement extraction approach support STRIDE threat categories?▼

Yes, this approach supports STRIDE threat categories by automatically generating security requirements based on identified threats like Information Disclosure, along with corresponding user stories and test cases.

Related Skills

Explore More Legal & Compliance Skills→
48Nauts-Operator48Nauts-Operator
3

security-requirement-extraction

Convert STRIDE threats into security requirements with traceability.

Community
Advanced
TheGreatLTheGreatL

security-requirement-extraction

Generate security requirements, user stories, and test cases from threat models.

Community
Advanced
chiruu12chiruu12
1

cso

Scan infrastructure for vulnerabilities, secrets, and threats.

Community
Advanced
voidrotvoidrot

security-requirement-extraction

Extract security requirements from threat models and map them to compliance frameworks.

Community
Advanced