risk-assessor

Security risk assessment from specifications, manuals, and design documents. Threat modeling (STRIDE/DREAD), asset identification, risk matrix generation, and CRA pre-compliance evaluation. Use for upstream security analysis before implementation. Triggers on: risk assessment, threat modeling, security review, design review, specification analysis, STRIDE, DREAD, attack tree, security requirements, pre-implementation security.