Threat Mitigation Mapping

Maps security threats to specific controls with surprising depth. Creates structured mitigation plans that identify coverage gaps, missing defense-in-depth layers, and control diversity issues. The dataclass templates handle everything from calculating coverage scores based on implementation status to flagging threats with insufficient protection. Perfect when you're turning a messy threat model into an actionable security roadmap or need to justify budget for specific controls. The gap analysis alone saves hours of manual review, and the control library gives you a solid foundation instead of starting from scratch.

skills.sh installs: 21.2K
GitHub stars: 42.4K
last updated: Aug 21, 2026

View on GitHub

Install

$ npx -y skills add wshobson/agents --skill threat-mitigation-mapping --agent claude-code

Installs into .claude/skills of the current project.

Files

Threat Mitigation Mapping

Connect threats to controls for effective security planning.

When to Use This Skill

Prioritizing security investments
Creating remediation roadmaps
Validating control coverage
Designing defense-in-depth
Security architecture review
Risk treatment planning

Core Concepts

1. Control Categories

Preventive ────► Stop attacks before they occur
   │              (Firewall, Input validation)
   │
Detective ─────► Identify attacks in progress
   │              (IDS, Log monitoring)
   │
Corrective ────► Respond and recover from attacks
                  (Incident response, Backup restore)

2. Control Layers

Layer	Examples
Network	Firewall, WAF, DDoS protection
Application	Input validation, authentication
Data	Encryption, access controls
Endpoint	EDR, patch management
Process	Security training, incident response