Domains
Forms
Mechanism
Breaks down how the skill works and what it produces, so you can quickly judge whether it fits your scenario and value.
When a threat model or business context exists and the user needs to translate identified threats into actionable security requirements, security user stories, test cases, or compliance mappings.
A structured set of security requirements with traceability to threats, testable acceptance criteria, and compliance mapping — ready for engineering and audit use.
Use Cases
A fintech team completes a STRIDE threat model for a new payment service. Using this skill, they convert each identified threat into specific security requirements with acceptance criteria and traceability links. The output feeds directly into sprint planning as security user stories, ensuring no threat is left unaddressed and compliance (PCI DSS) is mapped early.
A security architect must build test cases for a healthcare system under GDPR. Using this skill, they derive non-functional and constraint requirements (e.g., encryption-at-rest, access logging) from business context, then define testable acceptance criteria. The result is a security test suite and audit-ready documentation linking each control to its source threat.
Skill Relationships
Dependency relationships read as "the upper tier points to the lower tier." The current Skill sits in the middle tier — above are Skills that depend on it, below are Skills it depends on.
Tier 1 · These Skills Use Me
Tier 2 · Current Skill
Tier 3 · I Use These Skills
Browse this skill's relationships within its skillset. Click a node to switch the side panel; use the search box to jump to any skill.
Skill File
