Agent skill · security · wshobson
threat-mitigation-mapping
Map identified threats to appropriate security controls and mitigations. Use when prioritizing security investments, creating remediation plans, or validating control effectiveness.
Why this skill is useful
Provides detailed mapping of threats to specific security controls and mitigations that the AI wouldn't reliably generate on its own.
What it needs
About 2k tokens when loaded. Last updated 2026-08-05. 38,570 stars on the source repository.
What this skill does
Threat Mitigation Mapping Connect threats to controls for effective security planning. When to Use This Skill Prioritizing security investments Creating remediation roadmaps Validating control coverage Designing defense-in-depth Security architecture review Risk treatment planning Core Concepts 1. Control Categories 2. Control Layers Layer Examples --------------- ------------------------------------ Network Firewall, WAF, DDoS protection Application Input validation, authentication Data Encryption, access controls Endpoint EDR, patch management Process Security training, incident response 3. Defense in Depth Templates and detailed worked examples Full template library and detailed mitigation/control mappings live in references/details.md. Read that file when you need the concrete templates for: Mitigation Model, Defense in Depth scoring, Executive Summary scaffolding, Critical Gaps reporting, Recommendations, Implementation Roadmap, Results by Control. Best Practices Do's Map all threats - No threat should be unmapped Layer controls - Defense in depth is essential Mix control types - Preventive, detective, corrective Track effectiveness - Measure and improve Review regularly - Controls degrade over time Don'ts Don't rely on single controls - Single points of failure Don't ignore cost - ROI matters Don't skip testing - Untested controls may fail Don't set and forget - Continuous improvement Don't ignore people/process - Technology alone isn't enough
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills wshobson/threat-mitigation-mapping