Threat Mitigation Mapping
Links identified security threats to preventive, detective and corrective controls for planning.
- Repository
- wshobson/agents
- Stars
- 42,095
- Licence
- MIT
- Files
- 2 files
What it does
Once installed, the agent organises security work around threats: it helps pair each identified threat with suitable controls such as firewalls, input validation, encryption, monitoring or incident response, grouped by control type (preventive, detective, corrective) and by layer (network, application, data, endpoint, process). It also frames advice around defense in depth, so no single control is relied on. It can point to a reference file with templates for executive summaries, gap reports, roadmaps and control results.
Great for
- Security engineers or architects preparing a risk treatment or remediation plan
- Teams deciding where to spend limited security budget
- Anyone who needs a structured checklist to confirm every identified threat has at least one control
Skip it if
- Hands-on technical testing or vulnerability scanning, since the skill only organises and plans and does not scan systems (it does not perform the work itself)
- Replacing a qualified risk assessment or compliance audit, because the guidance is generic and unverified against any specific environment
Try asking
- “Map these five threats from our threat model to preventive, detective and corrective controls.”
- “Draft a remediation roadmap prioritising our critical security gaps for next quarter.”
- “Review our architecture for defense-in-depth coverage and point out single points of failure.”
- “Create an executive summary of our control coverage for the leadership team.”
Install in 3 steps
- 1
Download the skill
The ZIP contains the 2 original files, the MIT licence and an attribution note.
threat-mitigation-mapping.zip - 2
Add it to your agent
Claude Code (all projects)
mkdir -p ~/.claude/skills && unzip threat-mitigation-mapping.zip -d ~/.claude/skills/Claude Code / Agent SDK (this project only)
mkdir -p .claude/skills && unzip threat-mitigation-mapping.zip -d .claude/skills/Claude apps (web/desktop): Settings → Capabilities → Skills → Upload skill, and choose the ZIP.
- 3
Ask for the task
No special command needed — the agent reads the skill's description and loads it when your request matches. Try one of the prompts above.
Get better results
- Provide your actual threat list and system description so the mappings reflect your environment rather than generic examples.
- Ask the agent to read the reference templates when you need a specific document format, such as an executive summary or roadmap.
- Treat the output as a starting draft to validate with your security team, especially control effectiveness claims.
What's inside
- references/details.md
- SKILL.md
Redistributed unmodified from wshobson/agents under the MIT licence. The assessment was drafted with AI from the skill's files on 2026-10-29. Skills can instruct your agent to run code — read SKILL.md and any scripts before installing.