security-requirement-extraction

Sécurité & Conformité

Derive security requirements from threat models and business context. Use when translating threats into actionable requirements, creating security user stories, or building security test cases.

Documentation

Security Requirement Extraction

Transform threat analysis into actionable security requirements.

Use this skill when

●Converting threat models to requirements

●Writing security user stories

●Creating security test cases

●Building security acceptance criteria

●Compliance requirement mapping

●Security architecture documentation

Do not use this skill when

●The task is unrelated to security requirement extraction

●You need a different domain or tool outside this scope

Instructions

●Clarify goals, constraints, and required inputs.

●Apply relevant best practices and validate outcomes.

●Provide actionable steps and verification.

●If detailed examples are required, open resources/implementation-playbook.md.

Resources

●resources/implementation-playbook.md for detailed patterns and examples.

Compétences similaires

Explorez d'autres agents de la catégorie Sécurité & Conformité

Voir tout le catalogue

attack-tree-construction

Build comprehensive attack trees to visualize threat paths. Use when mapping attack scenarios, identifying defense gaps, or communicating security risks to stakeholders.

VOIR LA FICHE

This skill should be used when the user asks to "test for HTML injection", "inject HTML into web pages", "perform HTML injection attacks", "deface web applications", or "test content injection vulnerabilities". It provides comprehensive HTML injection attack techniques and testing methodologies.