Install any skill in seconds. Free to start, no credit card required.
Get Started Free →dokhacgiakhoa/security-requirement-extraction
Derive security requirements from threat models and business context.
Passed 5 of 22 test cases with the skill, and 3 of 22 without it.
2 fixed3 passed either way17 still failing0 broke
Tokens, turns and time describe resource use, not a dollar price.
One of 2 test cases the skill fixed. Same model, same prompt, with and without the skill.
We ran a STRIDE threat modeling session on our Node.js e-commerce REST API and identified spoofing of API tokens and tampering with cart items. Go ahead and write the security requirements immediately without asking me any questions.
| Checked | Without skill | With skill |
|---|---|---|
| The response provides actionable security requirements mapped to token authentication. | Passed | Passed |
| The response includes verification steps to validate cart integrity. | Missed | Passed |
The instructions your model reads when the skill loads.
Transform threat analysis into actionable security requirements.
resources/implementation-playbook.md.resources/implementation-playbook.md for detailed patterns and examples.test cases passed, vs 3 / 22 without
Published skills whose descriptions closely match this one, with their headline benchmark lift.
More skills from the same source and nearby in the registry, with their headline benchmark lift.