概要
This skill bridges the gap between high-level threat analysis and technical implementation by automatically deriving structured security requirements from threat models. By leveraging methodologies like STRIDE, it maps potential vulnerabilities to specific functional and non-functional requirements, generating traceable security user stories, acceptance criteria, and test specifications. It is an essential tool for security engineers and developers aiming to implement security-by-design, ensuring that every identified threat is met with a documented, verifiable technical control or business requirement.
