# Security Requirement Extraction (agent skill)

> Security Requirement Extraction is an agent skill (a SKILL.md file) from wshobson/agents. Derive security requirements from threat models and business context. It works with Claude Code, Codex, Cursor, GitHub Copilot and OpenCode and has 42,269 GitHub stars across a repository of 7 listed skills.

Derive security requirements from threat models and business context. Use when translating threats into actionable requirements, creating security user stories, or building security test cases. Transform threat analysis into actionable security requirements.

## Key facts

| Fact | Value |
|---|---|
| Repository | https://github.com/wshobson/agents |
| Skill path | plugins/security-scanning/skills/security-requirement-extraction/SKILL.md |
| Skill name | security-requirement-extraction |
| GitHub stars | 42,269 |
| Installs on skills.sh | 5 |
| License | MIT |
| Skills in repo | 7 |
| Plugin marketplace | claude-code-workflows |
| Official | no |
| Works with | Claude Code, Codex, Cursor, GitHub Copilot, OpenCode |
| Category | Security |
| Last commit | Nov 5, 2026 |

## When it triggers

- Use when translating threats into actionable requirements, creating security user stories, or building security test cases.

## Add this skill

### Claude Code

```sh
/plugin marketplace add wshobson/agents
/plugin install security-scanning@claude-code-workflows
```

In the Claude apps, zip the skill folder and upload it under Customize > Skills > + > Upload a skill (code execution must be on).

### ChatGPT / Codex

```sh
git clone --depth 1 https://github.com/wshobson/agents.git
cp -r agents/plugins/security-scanning/skills/security-requirement-extraction .agents/skills/security-requirement-extraction   # repo; ~/.agents/skills for all projects
```

### Cursor

```sh
git clone --depth 1 https://github.com/wshobson/agents.git
cp -r agents/plugins/security-scanning/skills/security-requirement-extraction .cursor/skills/security-requirement-extraction   # project; ~/.cursor/skills for all projects
```

Sources (checked 2026-10-07): https://code.claude.com/docs/en/skills, https://support.claude.com/en/articles/12512180-using-skills-in-claude, https://learn.chatgpt.com/docs/build-skills, https://cursor.com/docs/context/skills

skills.sh listing: https://www.skills.sh/wshobson/agents/security-requirement-extraction

---

Canonical page: https://appsgit.com/skills/wshobson-security-requirement-extraction
Source: appsgit (https://appsgit.com), the app store for github. Data from the GitHub API, refreshed daily.
Machine access: JSON API https://appsgit.com/api/v1/apps (OpenAPI: https://appsgit.com/openapi.json), MCP server https://mcp.appsgit.com/mcp, full index https://appsgit.com/llms-full.txt.