security-ask-questions-if-underspecified

Ensure thorough security analysis by identifying and asking clarifying questions when requirements, threat models, or context are underspecified. Use when a security task lacks sufficient context, when threat boundaries are unclear, or when assumptions need to be validated before proceeding.