Can I use this for compliance audits?

Yes, the skill includes templates for mapping requirements to major frameworks like SOC2, HIPAA, GDPR, and PCI DSS, making it easier to generate audit-ready documentation.

How does this skill translate threats into requirements?

It uses the STRIDE methodology to categorize threats and then applies predefined patterns to suggest specific security domains, such as authentication or data protection, that need addressed.

Do I need to be a security expert to use this?

While security knowledge is helpful, the skill provides a guided framework and templates that help developers identify and document necessary security controls without being experts.

What output formats does the skill support?

It generates structured Markdown for project documentation, Python-based data models for programmatic integration, and standard User Story formats for Jira or GitHub issues.

Security Requirement Extractor

Name: Security Requirement Extractor
Author: GaitanS

byGaitanS

0•

Seguridad y Pruebas

Transforms threat models and business context into actionable, testable security requirements and structured user stories.

This skill bridges the gap between high-level threat analysis and technical implementation by automatically deriving structured security requirements from threat models. By leveraging methodologies like STRIDE, it maps potential vulnerabilities to specific functional and non-functional requirements, generating traceable security user stories, acceptance criteria, and test specifications. It is an essential tool for security engineers and developers aiming to implement security-by-design, ensuring that every identified threat is met with a documented, verifiable technical control or business requirement.

Características Principales

01STRIDE-based threat-to-requirement mapping

02Automated security user story and acceptance criteria generation

03Compliance framework mapping for GDPR, HIPAA, and PCI DSS

04Test specification generation for security verification

050 GitHub stars

06Traceability matrix creation for threat-requirement linking

Casos de Uso

01Converting a STRIDE threat model into a development backlog of security tasks

02Creating automated security test cases based on derived requirements

03Mapping technical security controls to regulatory compliance standards

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add gaitans/ai-mancare security-requirement-extraction

For use in Claude.ai and ChatGPT

Download Skill