Skip to content
appsgit

Security Requirement Extraction

Security Requirement Extraction is an agent skill (a SKILL.md file) from wshobson/agents. Derive security requirements from threat models and business context. It works with Claude Code, Codex, Cursor, GitHub Copilot and OpenCode and has 42,269 GitHub stars across a repository of 7 listed skills.

github.com/wshobson/agents/plugins/security-scanning/skills/security-requirement-extraction (opens in a new tab)

Data as of from the GitHub API and skills.sh; description from the skill's SKILL.md. Report an error

View on GitHub (opens in a new tab)View on skills.sh (opens in a new tab)

Add this skill

Claude

This repository is a Claude Code plugin marketplace. In Claude Code:

/plugin marketplace add wshobson/agents
/plugin install security-scanning@claude-code-workflows

In the Claude apps, zip the security-requirement-extraction folder and upload it under Customize > Skills > + > Upload a skill (code execution must be on).

ChatGPT / Codex

Codex reads skills from .agents/skills/ in a repo or ~/.agents/skills/ for every project:

git clone --depth 1 https://github.com/wshobson/agents.git
cp -r agents/plugins/security-scanning/skills/security-requirement-extraction .agents/skills/security-requirement-extraction   # repo; ~/.agents/skills for all projects

Standalone skills also load in the ChatGPT desktop app.

Cursor

Cursor loads skills from .cursor/skills/ (or ~/.cursor/skills/) and also reads .claude/skills/:

git clone --depth 1 https://github.com/wshobson/agents.git
cp -r agents/plugins/security-scanning/skills/security-requirement-extraction .cursor/skills/security-requirement-extraction   # project; ~/.cursor/skills for all projects

Source (checked Oct 7, 2026): code.claude.com/docs/en/skills (opens in a new tab), code.claude.com/docs/en/plugin-marketplaces (opens in a new tab), support.claude.com/en/articles/12512180-using-skills-in-claude (opens in a new tab), learn.chatgpt.com/docs/build-skills (opens in a new tab), cursor.com/docs/context/skills (opens in a new tab)

What this skill does

Derive security requirements from threat models and business context. Use when translating threats into actionable requirements, creating security user stories, or building security test cases. Transform threat analysis into actionable security requirements.

When it triggers

  • Use when translating threats into actionable requirements, creating security user stories, or building security test cases.

More skills in wshobson/agents

7 skills are listed from this repository.

Similar skills

More security skills

All Security

FAQ

Security Requirement Extraction FAQ

Still curious? Email info@appsgit.com.

How do I install the Security Requirement Extraction skill?

In Claude Code, run /plugin marketplace add wshobson/agents and then /plugin install security-scanning@claude-code-workflows. For Codex or Cursor, copy the security-requirement-extraction folder into .agents/skills/ or .cursor/skills/.

Is the Security Requirement Extraction skill free?

Yes. The repository is open source under the MIT license.

Is Security Requirement Extraction maintained?

The repository's most recent commit was on Nov 5, 2026. appsgit only lists skills from repositories with a commit in the last six months.