PRD Securability Enhancement (FIASSE/SSEM + ASVS)

Enhance PRD content so each feature has explicit, testable securability requirements aligned to OWASP ASVS and shaped by FIASSE v1.0.4 / SSEM. The goal is to upgrade the requirements artifact before implementation, so delivery teams build securable capabilities by design rather than retrofitting controls later.

This skill is requirements-centric. It does not review or write code. If the user wants code review, redirect to securability-engineering-review. If they want code generation, redirect to securability-engineering.

When to Invoke

Trigger this skill when the user asks to:

• Strengthen or harden a PRD, spec, user-story set, or product brief with security requirements
• Choose an ASVS assurance level (Level 1, 2, or 3) for a product or feature
• Map features to ASVS controls or check ASVS coverage of a requirements doc
• Find missing security requirements before development starts
• Annotate features with SSEM attributes or FIASSE tenets
• Add testable security acceptance criteria to existing functional requirements

Adjacent phrasings: "security-review this spec", "what's missing security-wise from this feature list", "add NFRs for security to my PRD", "make these requirements securable".