Security Requirement Extraction

Bridges the gap between threat modeling and actual implementation work. You feed it threat analysis or business context, and it generates concrete security requirements, user stories, or test cases you can hand to your team. Useful when you've identified threats but need to translate them into actionable dev tasks or compliance mappings. The skill includes an implementation playbook with patterns and examples, which matters because requirement extraction is where a lot of security programs stall out. It won't replace domain expertise or environment-specific validation, but it gives you a structured way to move from "here's what could go wrong" to "here's what we need to build."

skills.sh installs: 243
GitHub stars: 39.4K
last updated: Jun 3, 2026

View on GitHub

Install

$ npx -y skills add sickn33/antigravity-awesome-skills --skill security-requirement-extraction --agent claude-code

Installs into .claude/skills of the current project.

Files

Security Requirement Extraction

Transform threat analysis into actionable security requirements.

Use this skill when

Converting threat models to requirements
Writing security user stories
Creating security test cases
Building security acceptance criteria
Compliance requirement mapping
Security architecture documentation

Do not use this skill when

The task is unrelated to security requirement extraction
You need a different domain or tool outside this scope

Instructions

Clarify goals, constraints, and required inputs.
Apply relevant best practices and validate outcomes.
Provide actionable steps and verification.
If detailed examples are required, open resources/implementation-playbook.md.

Resources

resources/implementation-playbook.md for detailed patterns and examples.

Limitations

Use this skill only when the task clearly matches the scope described above.
Do not treat the output as a substitute for environment-specific validation, testing, or expert review.
Stop and ask for clarification if required inputs, permissions, safety boundaries, or success criteria are missing.

SKILL.md on GitHub