Open source alternatives to threat-mitigation-mapping
24 open source AI Skills apps to use instead, best rated first.
Top picks
- G
github-ops
Getgithub-ops is an agent skill from the ECC collection by affaan-m, listed on skills.sh. It manages a GitHub repository with a focus on community health, CI reliability and the experience of contributors. It covers triaging issues by classify
Open source
- O
opensource-pipeline
Getopensource-pipeline is an agent skill from the ECC collection by affaan-m, listed on skills.sh. It prepares a private project for safe public release through a three-stage pipeline. The fork stage strips secrets from a copy. The sanitise st
Open source
- A
andrej-karpathy-skills
Getandrej-karpathy-skills is a single CLAUDE.md file from the multica-ai project that is meant to improve how Claude Code behaves on coding tasks. It is derived from Andrej Karpathy's public observations about LLM coding pitfalls. The file dis
Open source
- M
microsoft/markitdown
Getmarkitdown-mcp is the MCP server package for MarkItDown, Microsoft's tool for converting many file formats to Markdown for language models. It is a lightweight server that runs over stdio, Streamable HTTP or SSE, and exposes one tool, conve
Open source
- O
od-contribute
Getod-contribute is an agent skill in the OpenDesign project that provides a guided, one-click contribution flow to the OpenDesign repository, written so that people without a coding background can send a real pull request. It is locked to the
Open source
- G
github-deep-research
Getgithub-deep-research is an agent skill from the DeerFlow project that researches a single GitHub repository in several rounds and writes a report in Markdown. It is for requests that need more than a README summary, such as a comprehensive
Open source
More AI Skills apps
modelcontextprotocol/server-memory
Knowledge graph-based persistent memory for maintaining context
netdata/netdata#Netdata
Discovery, exploration, reporting and root cause analysis over Netdata metrics
Learn Claude Code
by shareAI-lab - A really interesting analysis of how coding agents like Claude
MCP Toolbox for Databases
MCP Toolbox for Databases enables your agent to connect to your database
About threat-mitigation-mapping
threat-mitigation-mapping
Map identified threats to appropriate security controls and mitigations
threat-mitigation-mapping is an agent skill from the wshobson/agents collection for connecting identified threats to the security controls that address them. Once threats have been found, a team needs to know which controls reduce each one and whether the controls it has are enough. The skill starts with control categories, its core concepts, which group the kinds of safeguard a system can use so that the agent can match each threat to a suitable control. It covers prioritizing security investments by comparing the threats each control addresses, creating remediation roadmaps that sequence the work, validating control coverage to find threats with no control or only a weak one, and designing defense in depth, where several layers of control cover the same threat in case one fails. It also supports security architecture reviews and risk treatment planning, where a team decides to mitigate, accept, transfer or avoid each risk. It applies when prioritizing security spending, creating remediation plans, validating that controls cover the threats, designing layered defenses, reviewing architecture, and planning risk treatment. The mapping is only as good as the threat list it starts from, so it is best used after a threat modeling session such as the STRIDE skill. The skill is installed with the skills CLI from the wshobson/agents repository. Its skills.sh page showed about 18.3K installs and passing results from three security audits at the time of the scan.
- Price
- Free
- Made by
- wshobson
- Category
- AI Skills
- Website
- github.com/wshobson/agents/threat-mitigation-mapping