Threat Mitigation Mapping
Threat Mitigation Mapping is an agent skill (a SKILL.md file) from wshobson/agents. Map identified threats to appropriate security controls and mitigations. It works with Claude Code, Codex, Cursor, GitHub Copilot and OpenCode and has 42,269 GitHub stars across a repository of 7 listed skills.
Data as of from the GitHub API and skills.sh; description from the skill's SKILL.md. Report an error
- Multi-skill repo
- Plugin marketplace
- Security
- Maintained
Add this skill
Claude
This repository is a Claude Code plugin marketplace. In Claude Code:
/plugin marketplace add wshobson/agents
/plugin install security-scanning@claude-code-workflowsIn the Claude apps, zip the threat-mitigation-mapping folder and upload it under Customize > Skills > + > Upload a skill (code execution must be on).
ChatGPT / Codex
Codex reads skills from .agents/skills/ in a repo or ~/.agents/skills/ for every project:
git clone --depth 1 https://github.com/wshobson/agents.git
cp -r agents/plugins/security-scanning/skills/threat-mitigation-mapping .agents/skills/threat-mitigation-mapping # repo; ~/.agents/skills for all projectsStandalone skills also load in the ChatGPT desktop app.
Cursor
Cursor loads skills from .cursor/skills/ (or ~/.cursor/skills/) and also reads .claude/skills/:
git clone --depth 1 https://github.com/wshobson/agents.git
cp -r agents/plugins/security-scanning/skills/threat-mitigation-mapping .cursor/skills/threat-mitigation-mapping # project; ~/.cursor/skills for all projectsSource (checked Oct 7, 2026): code.claude.com/docs/en/skills (opens in a new tab), code.claude.com/docs/en/plugin-marketplaces (opens in a new tab), support.claude.com/en/articles/12512180-using-skills-in-claude (opens in a new tab), learn.chatgpt.com/docs/build-skills (opens in a new tab), cursor.com/docs/context/skills (opens in a new tab)
What this skill does
Map identified threats to appropriate security controls and mitigations. Use when prioritizing security investments, creating remediation plans, or validating control effectiveness. Connect threats to controls for effective security planning.
When it triggers
- Use when prioritizing security investments, creating remediation plans, or validating control effectiveness.
More skills in wshobson/agents
7 skills are listed from this repository.
Similar skills
More security skills
Ciso Advisor
alirezarezvani/claude-skills
Use for security leadership decisions: a security program, budget justification in dollars, SOC 2 vs ISO 27001 vs HIPAA roadmap, or board security reporting.
Active · last commit Nov 5, 2026
SecurityPythonExperiment Audit
wanshuiyin/Auto-claude-code-research-in-sleep
Audit experiment integrity before claiming results.
Active · last commit Nov 6, 2026
SecurityPythonGws Shared
googleworkspace/cli
gws CLI: Shared patterns for authentication, global flags, and output formatting.
Maintained · last commit Oct 30, 2026
SecurityRustLark Shared
larksuite/cli
Use for lark-cli setup/auth tasks: auth login/status/logout, user vs bot identity, business-domain permissions (--domain, including all/docs/drive), missing scopes, revoking authorization, or…
Active · last commit Nov 5, 2026
SecurityGoDingtalk Channel Connect
agentscope-ai/QwenPaw
Use a headed browser to automatically complete DingTalk channel integration for QwenPaw.
Active · last commit Nov 6, 2026
SecurityTypeScriptSkill Security Auditor
eigent-ai/eigent
Security auditing for code, configs, and infrastructure.
Active · last commit Nov 2, 2026
SecurityTypeScript
How do I install the Threat Mitigation Mapping skill?
In Claude Code, run /plugin marketplace add wshobson/agents and then /plugin install security-scanning@claude-code-workflows. For Codex or Cursor, copy the threat-mitigation-mapping folder into .agents/skills/ or .cursor/skills/.
Is the Threat Mitigation Mapping skill free?
Yes. The repository is open source under the MIT license.
Is Threat Mitigation Mapping maintained?
The repository's most recent commit was on Nov 5, 2026. appsgit only lists skills from repositories with a commit in the last six months.