AutoGineer
Generated banner for Threat Mitigation Mapping
Generated logo for Threat Mitigation Mapping

Threat Mitigation Mapping

Seth HobsonCommunityCreated by Seth Hobson

  • Skill
  • Guidelines
  • Security
  • MIT
  • No issues found
Download ZIP

From the author

Map identified threats to appropriate security controls and mitigations. Use when prioritizing security investments, creating remediation plans, or validating control effectiveness.
— the description by Seth Hobson

AutoGineer summary

Written by AutoGineer from the skill’s own files, not by the author

This skill provides a structured approach to connecting identified security threats with appropriate preventive, detective, and corrective controls. It emphasizes the principle of defense-in-depth, encouraging users to layer security measures across network, application, data, endpoint, and process levels. By utilizing the provided mitigation model, users can evaluate the effectiveness of their security posture, identify coverage gaps, and prioritize investments based on risk and implementation status.

What it does

  • Maps specific threats to corresponding security controls.
  • Categorizes controls into preventive, detective, and corrective types.
  • Organizes security measures across five distinct layers: network, application, data, endpoint, and process.
  • Provides a methodology for calculating control coverage and identifying mitigation gaps.
  • Supports the design of defense-in-depth strategies to avoid single points of failure.
  • Offers templates for creating remediation roadmaps and executive security summaries.

When to use it

  • When prioritizing security investments and budget allocation.
  • During the creation of comprehensive remediation roadmaps.
  • When validating the coverage and effectiveness of existing security controls.
  • While conducting security architecture reviews.
  • When planning risk treatment strategies for identified vulnerabilities.

Advantages

  • Ensures no threat is left unmitigated through systematic mapping.
  • Promotes a balanced security posture by mixing control types.
  • Reduces reliance on single points of failure via layered defense.
  • Facilitates data-driven decision making for security improvements.
  • Encourages continuous improvement through regular review cycles.

Usage examples

“How can I assess if my current controls are sufficient for a SQL injection threat?”
The agent will guide you to map the SQL injection threat to specific application-layer controls, evaluate their implementation status, and check if you have complementary detective or corrective measures in place.
“Help me identify gaps in my defense-in-depth strategy for remote access.”
The agent will analyze your current control layers, identify if you are relying on a single point of failure, and suggest additional controls across different layers to improve resilience.

Install

  1. Download the skill as a ZIP:

    https://autogineer.com/agent-skills/wshobson/threat-mitigation-mapping/download

  2. Unzip it into the cross-client skills folder of your project:

    mkdir -p .agents/skills && unzip threat-mitigation-mapping.zip -d .agents/skills

Documentation by Seth Hobson

Threat Mitigation Mapping

Connect threats to controls for effective security planning.

When to Use This Skill

  • Prioritizing security investments

  • Creating remediation roadmaps

  • Validating control coverage

  • Designing defense-in-depth

  • Security architecture review

  • Risk treatment planning

Core Concepts

1. Control Categories
Preventive ────► Stop attacks before they occur
   │              (Firewall, Input validation)
   │
Detective ─────► Identify attacks in progress
   │              (IDS, Log monitoring)
   │
Corrective ────► Respond and recover from attacks
                  (Incident response, Backup restore)
2. Control Layers
LayerExamples
NetworkFirewall, WAF, DDoS protection
ApplicationInput validation, authentication
DataEncryption, access controls
EndpointEDR, patch management
ProcessSecurity training, incident response
3. Defense in Depth
                    ┌──────────────────────┐
                    │      Perimeter       │ ← Firewall, WAF
                    │   ┌──────────────┐   │
                    │   │   Network    │   │ ← Segmentation, IDS
                    │   │  ┌────────┐  │   │
                    │   │  │  Host  │  │   │ ← EDR, Hardening
                    │   │  │ ┌────┐ │  │   │
                    │   │  │ │App │ │  │   │ ← Auth, Validation
                    │   │  │ │Data│ │  │   │ ← Encryption
                    │   │  │ └────┘ │  │   │
                    │   │  └────────┘  │   │
                    │   └──────────────┘   │
                    └──────────────────────┘

Templates and detailed worked examples

Full template library and detailed mitigation/control mappings live in references/details.md. Read that file when you need the concrete templates for: Mitigation Model, Defense in Depth scoring, Executive Summary scaffolding, Critical Gaps reporting, Recommendations, Implementation Roadmap, Results by Control.

Best Practices

Do's

  • Map all threats - No threat should be unmapped

  • Layer controls - Defense in depth is essential

  • Mix control types - Preventive, detective, corrective

  • Track effectiveness - Measure and improve

  • Review regularly - Controls degrade over time

Don'ts

  • Don't rely on single controls - Single points of failure

  • Don't ignore cost - ROI matters

  • Don't skip testing - Untested controls may fail

  • Don't set and forget - Continuous improvement

  • Don't ignore people/process - Technology alone isn't enough

Files

ATTRIBUTION.md

Attribution

This folder is an unmodified copy of the Agent Skill "threat-mitigation-mapping", distributed by AutoGineer (https://autogineer.com/agent-skills).

The skill's own files are unmodified copies. AutoGineer is not affiliated with or endorsed by the author or the publisher.

Files added by AutoGineer

  • ATTRIBUTION.md: this file, written by AutoGineer

  • LICENSE: copied from LICENSE

Requirements and compatibility

Works with: Claude Code, Claude apps, OpenAI Codex, GitHub Copilot, Cursor, Gemini CLI, Kiro, OpenCode, Goose, Amp, Roo Code, JetBrains Junie, Factory Droid, Devin (ex-Windsurf), Mistral Vibe, OpenHands, Letta

“Works with” means the tool reads the open Agent Skills format; a skill written for one tool may use features others lack.

Security

No issues found by our static scan· No issues found

A static scan is not a guarantee. Skills are third-party content: review a skill before you let an agent use it.

Attribution and licence

Created by
Seth Hobson
Publisher
Seth Hobson (Community)
Source
wshobson/agents · plugins/security-scanning/skills/threat-mitigation-mapping · commit 4bde316
Licence
MIT License (redistribution allowed)
  • LICENSE (added by AutoGineer from LICENSE)
  • ATTRIBUTION.md (written by AutoGineer)
Synced

AutoGineer is not affiliated with or endorsed by Seth Hobson or Seth Hobson.

Download ZIP

The ZIP holds the skill’s files, its licence files and an ATTRIBUTION.md. Download threat-mitigation-mapping.zip