verification-scaffold-skill

Generate SVA assertion templates and specification-only descriptions from threat findings.

1|1|Updated Feb 21, 2026
One-click install
npx skills add https://github.com/dtsong/claude-code-windows-setup --skill verification-scaffold-skill
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: verification-scaffold-skill
Source: https://github.com/dtsong/claude-code-windows-setup/tree/main/skills/soc-security/skills/verification-scaffold-skill
Command: npx skills add https://github.com/dtsong/claude-code-windows-setup --skill verification-scaffold-skill

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill automates the creation of essential security verification artifacts, transforming raw threat findings into actionable checklists, SVA assertion templates, and specification-only descriptions, significantly accelerating the security review process.

Core Features & Use Cases

  • Automated Artifact Generation: Creates SVA templates, natural-language properties, and spec-only descriptions based on threat findings.
  • Tiered Verification: Organizes verification items into Tier 1 (SVA), Tier 2 (NL properties), and Tier 3 (spec-only) based on verifiability.
  • Confidence Propagation: Accurately reflects the confidence of the upstream threat finding in the generated verification item.
  • Use Case: After a threat modeling session identifies potential vulnerabilities, this Skill can instantly generate the necessary SVA assertions and review checklists, ensuring comprehensive security coverage and saving significant manual effort.

Quick Start

Use the verification-scaffold-skill to generate verification artifacts for the provided threat findings.

Frequently Asked Questions about verification-scaffold-skill

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I generate SVA assertion templates from threat findings?

You generate SVA assertion templates from threat findings by using automated artifact generation that parses threat modeling outputs and creates tiered SVA assertions, natural-language properties, and spec-only descriptions for verification engineers.

What is tiered verification in security review checklists?

Tiered verification organizes security review checklists into Tier 1 for SVA assertions, Tier 2 for natural-language properties, and Tier 3 for spec-only descriptions, categorizing items based on their verifiability and technical depth.

How do I propagate threat confidence levels into security verification items?

You propagate threat confidence levels into security verification items by mapping the upstream threat analysis confidence score directly to the generated SVA assertions and natural-language properties, ensuring accurate risk reflection in the review board artifacts.

How do I create natural-language security properties for specification-only descriptions?

You create natural-language security properties and spec-only descriptions by transforming raw threat findings into structured verification artifacts using authoring guides and SVA pattern references to ensure consistent, high-quality output for security review boards.

Does automated security verification artifact generation work without formal verification tools?

Automated security verification artifact generation works without formal verification tools by producing specification-only descriptions and natural-language properties for Tier 2 and Tier 3 items, though Tier 1 SVA assertions require a downstream formal verification environment.

When should I not use automated SVA assertion generation for security reviews?

You should avoid automated SVA assertion generation when raw threat findings lack structured confidence metrics or when the security review requires manual assertion authoring, as the tool relies on structured threat analysis inputs to propagate confidence and ensure accurate tiered verification.