threat-mitigation-mapping – Security skill for AI agents
Map identified threats to appropriate security controls and mitigations. Use when prioritizing security investments, creating remediation plans, or validating control effectiveness.
Install the threat-mitigation-mapping skill with one command
Pick the tool you use, copy the command and paste it in your terminal. The skill lands in that tool's skills folder and is ready in your next session.
Claude Code
mkdir -p ~/.claude/skills && curl -fsSL https://skill.dn1nguoi.com/z/threat-mitigation-mapping-bc22d.tgz | tar xz -C ~/.claude/skills
Call it in Claude Code: /threat-mitigation-mapping – then describe the task you want done.
Codex
mkdir -p ~/.codex/skills && curl -fsSL https://skill.dn1nguoi.com/z/threat-mitigation-mapping-bc22d.tgz | tar xz -C ~/.codex/skills
Call it in Codex: $threat-mitigation-mapping – then describe the task you want done.
Hermes Agent
mkdir -p ~/.hermes/skills && curl -fsSL https://skill.dn1nguoi.com/z/threat-mitigation-mapping-bc22d.tgz | tar xz -C ~/.hermes/skills
Call it in Hermes Agent: /threat-mitigation-mapping – then describe the task you want done.
DeepSeek
mkdir -p ~/.deepcode/skills && curl -fsSL https://skill.dn1nguoi.com/z/threat-mitigation-mapping-bc22d.tgz | tar xz -C ~/.deepcode/skills
Call it in DeepSeek: /threat-mitigation-mapping – then describe the task you want done.
SKILL.md content
Threat Mitigation Mapping
Connect threats to controls for effective security planning.
Use this skill when
- Prioritizing security investments
- Creating remediation roadmaps
- Validating control coverage
- Designing defense-in-depth
- Security architecture review
- Risk treatment planning
Do not use this skill when
- The task is unrelated to threat mitigation mapping
- You need a different domain or tool outside this scope
Instructions
- Clarify goals, constraints, and required inputs.
- Apply relevant best practices and validate outcomes.
- Provide actionable steps and verification.
- If detailed examples are required, open
resources/implementation-playbook.md.
Resources
The bundled playbook’s scores are prioritization aids, not validated risk reduction or compliance certification. Base findings on concrete threats, actual control evidence and remaining residual risk.
resources/implementation-playbook.mdfor detailed patterns and examples.
Limitations
- Use this skill only when the task clearly matches the scope described above.
- Do not treat the output as a substitute for environment-specific validation, testing, or expert review.
- Stop and ask for clarification if required inputs, permissions, safety boundaries, or success criteria are missing.
Related skills
- threat-modeling – Conduct threat modeling using STRIDE methodology. Identify threats, assess risks, and…
- threat-modeling-expert – Expert in threat modeling methodologies, security architecture review, and risk…
- top-web-vulnerabilities – Provide an illustrative, overlapping reference for common web application vulnerability…
- usage-engineer – Cut wasted tokens in coding-agent sessions: compact long logs, stop identical retries…
- vendor-management – Implement vendor risk management programs. Assess third-party security and maintain…
- vercel-optimize – Audit deployed Vercel apps for cost and performance issues using metrics, project…
- vulnerability-scanner – Advanced vulnerability analysis principles. OWASP 2025, Supply Chain Security, attack…
- vulnerability-scanning – Scan systems and dependencies for CVEs and security vulnerabilities.