Skip to main content
affpapa.org
RU EN
skill Claude Code CX Codex Cursor GitHub Copilot official · Anthropic

risk-assessment — Claude Code skill: what it does, how to install

Identifies, evaluates, and plans mitigations for operational risks across projects, vendors, and decisions. It generates a prioritized register with assigned owners.

Install into Claude Code · Skills CLI (Vercel) All methods and platforms ↓ 
npx skills add anthropics/knowledge-work-plugins --skill risk-assessment -a claude-code
Open on GitHub

What risk-assessment does

The skill evaluates risks using a matrix based on likelihood and impact, grading each item from Low to Critical. It covers six distinct categories: operational failures, financial overruns, compliance issues, strategic shifts, reputational damage, and security vulnerabilities.

The output is a structured risk register. Each entry records the description, likelihood, impact, overall risk level, concrete mitigation actions, an owner, and the current status. The skill explicitly focuses on controllable and material risks. Threats that fall outside your direct control are filtered out to keep the register actionable.

What it helps with

  • identify operational and financial risks before project rollout
  • score threat severity with a likelihood and impact matrix
  • build a prioritized risk register with owners and statuses
  • plan concrete mitigations for critical vulnerabilities

Example prompts for the agent

  • What are the risks of switching to this new vendor?
  • Build a risk register for our infrastructure migration
  • What could go wrong with this deployment plan?

How to install risk-assessment

1Skills CLI (Vercel)

npx skills add anthropics/knowledge-work-plugins --skill risk-assessment -a claude-code

2Manually: put the files in place

~/.claude/skills/risk-assessment/SKILL.md

Copy the whole skill folder; for one project use .claude/skills/risk-assessment/

From the same set133

The whole set →
data-visualization official anthropics Selects chart types based on data structure and produces Python visualization code in matplotlib, seaborn, and plotly. Useful for reports and research figures. Claude Code CX Codex Cursor +1 13,700installs documentation official anthropics A skill for technical writing that drafts READMEs, API references, runbooks, architecture docs and onboarding guides. Useful when the code exists but the description does not. Claude Code CX Codex Cursor +1 10,300installs build-dashboard official anthropics Builds a self-contained HTML dashboard with Chart.js charts, KPI cards, and filterable tables. Useful for turning raw data or queries into a standalone browser report. Claude Code CX Codex Cursor +1 9,100installs memory-management official anthropics This skill organizes workplace shorthand, names, and project details into files an agent can consult. It fits projects where requests rely on an internal vocabulary and shared context. Claude Code CX Codex Cursor +1 7,400installs task-management official anthropics Tracks commitments, active work, and follow-ups in a local TASKS.md file. Useful when managing project to-dos directly from the AI coding chat. Claude Code CX Codex Cursor +1 7,200installs architecture official anthropics Writes an Architecture Decision Record or reviews a system design: options, trade-offs, consequences. Useful when you have to pick between technologies. Claude Code CX Codex Cursor +1 6,700installs knowledge-synthesis official anthropics Merges search results across chats, emails, and documents into deduplicated answers with source attribution. Flags conflicting facts and scores source reliability. Claude Code CX Codex Cursor +1 6,400installs testing-strategy official anthropics This skill designs testing strategies and test plans for a project. Use it when you need test types, coverage goals, or gaps in existing checks. Claude Code CX Codex Cursor +1 6,400installs

Similar

prioritization-frameworks phuryn Reference guide to 9 prioritization frameworks: RICE, ICE, Opportunity Score, Kano, MoSCoW and more. Helps you pick the right method, compare approaches, and rank tasks by importance. Claude Code CX Codex Cursor +1 9,900installs cmux-keyboard-shortcuts manaflow-ai Configures cmux shortcuts in ~/.config/cmux/cmux.json. Useful for adopting tmux-style chords, auditing overrides, and validating syntax. Claude Code CX Codex Cursor +1 6,200installs mempalace-recall MemPalace Instructs the agent to query MemPalace before answering questions about past decisions, projects, or people. Prevents model hallucinations when facts are already stored. Claude Code CX Codex Cursor +1 1,300installs strategy-red-team phuryn Stress-tests PRDs, roadmaps, and strategies by attacking load-bearing assumptions before reality does, returning kill criteria and cheap tests. Claude Code CX Codex Cursor +1 9,200installs find-skills vercel-labs Discovers and installs agent skills from skills.sh directly inside your coding assistant. Handy when you need domain-specific workflows for a project. Claude Code CX Codex Cursor +1 4,000,000installs grill-me Matt Pocock grill-me interviews you about a plan or design to expose gaps and sharpen decisions. Use it before implementation starts. Claude Code 1,424,476installs grill-with-docs Matt Pocock This skill interviews you about a plan or design and creates ADRs and a glossary along the way. Use it when decisions need sharper definition. Claude Code 1,219,756installs handoff Matt Pocock Creates a handoff document from the current conversation so another agent can continue the work. Use it when a task moves to a new session or agent. Claude Code 1,038,491installs

Questions about risk-assessment

How do I install risk-assessment in Claude Code?

Run npx skills add anthropics/knowledge-work-plugins --skill risk-assessment -a claude-code in your terminal.

What does the risk-assessment skill do?

It systematically evaluates operational, financial, compliance, strategic, reputational, and security risks, organizing them into a prioritized action plan.

What fields are included in the generated risk register?

Each entry contains a description, likelihood, impact, risk level, mitigation strategy, assigned owner, and status (Open, Mitigated, Accepted, or Closed).

Source text

SKILL.md · Apache-2.0 
---
name: risk-assessment
description: Identify, assess, and mitigate operational risks. Trigger with "what are the risks", "risk assessment", "risk register", "what could go wrong", or when the user is evaluating risks associated with a project, vendor, process, or decision.
---

# Risk Assessment

Systematically identify, assess, and plan mitigations for operational risks.

## Risk Assessment Matrix

| | Low Impact | Medium Impact | High Impact |
|---|-----------|---------------|-------------|
| **High Likelihood** | Medium | High | Critical |
| **Medium Likelihood** | Low | Medium | High |
| **Low Likelihood** | Low | Low | Medium |

## Risk Categories

- **Operational**: Process failures, staffing gaps, system outages
- **Financial**: Budget overruns, vendor cost increases, revenue impact
- **Compliance**: Regulatory violations, audit findings, policy breaches
- **Strategic**: Market changes, competitive threats, technology shifts
- **Reputational**: Customer impact, public perception, partner relationships
- **Security**: Data breaches, access control failures, third-party vulnerabilities

## Risk Register Format

For each risk, document:
- **Description**: What could happen
- **Likelihood**: High / Medium / Low
- **Impact**: High / Medium / Low
- **Risk Level**: Critical / High / Medium / Low
- **Mitigation**: What we're doing to reduce likelihood or impact
- **Owner**: Who is responsible for managing this risk
- **Status**: Open / Mitigated / Accepted / Closed

## Output

Produce a prioritized risk register with specific, actionable mitigations. Focus on risks that are controllable and material.

© anthropics · Apache-2.0 · anthropics/knowledge-work-plugins

See also

Project sponsors

Companies that keep this analytics open
Gold sponsor
Nutra.Club

Impressions, clicks and code copies — open statistics. We keep the numbers public for the same reason NeBlask itself is public. Become a sponsor