Plugins

8 plugins

Plan a sprint by estimating capacity, selecting stories, and identifying risks.

3 skills · plugin

MCP Security Audit Pipeline

Audit MCP servers for secrets exposure, shell injection, and supply chain risks.

12 skills · plugin

Sprint Planning Pipeline

Install this pack to plan a sprint by estimating capacity, selecting stories, and identifying risks.

3 skills · plugin

Validate Product Idea

Validate a product idea by clarifying intent, identifying risky assumptions, and designing experiments to test them.

4 skills · plugin

Secure Google Cloud Workload

Assesses security requirements, identifies risks, and provides actionable recommendations for IAM, network, and data protection.

4 skills · plugin

Sprint Planning Pack

For scrum masters and PMs planning sprints: plan sprint, run retro, and facilitate pre-mortem risk analysis.

9 skills · plugin

@alirezarezvani

14 regulatory affairs & quality management skills for HealthTech/MedTech: ISO 13485 QMS, MDR 2017/745, FDA 510(k)/PMA, GDPR/DSGVO, ISO 27001 ISMS, CAPA management, risk management, clinical evaluation, SOC 2 compliance.

10 skills · plugin

@alirezarezvani

Business Operations

Internal BizOps domain. v2.8.0 ships 7 skills: orchestrator + process-mapper (BPMN/bottleneck/cycle-time, Lean+TOC) + vendor-management (scorecard+SLA+3rd-party risk, NIST SP 800-161/ISO 27036) + capacity-planner (Erlang-C queueing math for ops teams, NOT engineering) + internal-comms (ADKAR+Kotter 8-step, NOT marketing) + knowledge-ops (SOP+runbook+KB hygiene with 5W2H, context: fork) + procureme

3 skills · plugin

Results for “risk”

463 skills

AI-powered Claude Code skill that performs deep code review using formal logic and reasoning frameworks to detect bugs, anti-patterns, and security risks beyond what linters catch.

Scan your Claude Code configuration (.claude/ directory) for security vulnerabilities, misconfigurations, and injection risks using AgentShield. Checks CLAUDE.md, settings.json, MCP servers, hooks, and agent definitions.

Bankr Dev Leverage Trading

This skill should be used when building perpetual trading bots, implementing leverage functionality, or adding position management. Covers Avantis integration, long/short positions, and risk controls.

Scan your Claude Code configuration (.claude/ directory) for security vulnerabilities, misconfigurations, and injection risks using AgentShield. Checks CLAUDE.md, settings.json, MCP servers, hooks, and agent definitions.

Automates code review for pull requests across 14+ languages, analyzing complexity, risk, code quality, and generating structured review reports.

20.4k · bundle

Analyze AI disruption pressure across a business, map competitive exposure, and produce a 90-day defensive action plan.

Alphagbm Options Strategy

Recommends optimal multi-leg option strategies based on market view, with 15+ templates and full P&L profiles.

Executing Hard Tasks

Guides multi-step tasks by decomposing them into checkpoints, verifying results with concrete observations, and re-planning after surprises or failures.

Guides contributors through creating pull requests that add or fix skills, with a checklist covering metadata validation, risk labeling, and security disclaimers.

Turns a mature product plan into a rough implementation plan with high-level steps, maturity and verification marks, and a risks section.

Plain-English translation layer for non-technical Copilot CLI users. Translates every approval prompt, error message, and technical output into clear, jargon-free English with color-coded risk indicators.

Use with task-agent or review-agent for task-local cache scope, freshness, invalidation, and source-load risk. Do not use without a cache decision or as task owner.

hoangnguyen0403

Guides quality-first TDD for new behavior, bug fixes, and test changes. Selects the smallest test layer, proves a distinct regression risk, and runs bounded RED-GREEN-REFACTOR verification.

Prince2 Stage Boundary Pack

Prepare PRINCE2 Managing a Stage Boundary material: end stage report, next stage plan, updated business case, updated project plan, lessons, risks, issues, and exception plan if needed.

Analyze Feature Requests

Categorize, evaluate, and prioritize customer feature requests against product goals using strategic alignment, impact, effort, and risk analysis.

Structures a bounded spec-build-review development loop with explicit scope, stop conditions, and human approval gates for risky or ambiguous work.

Scanning Kubernetes Manifests With Kubesec

Scan Kubernetes resource manifests with Kubesec to identify misconfigurations, privilege escalation risks, and deviations from security best practices.

24.6k · bundle

Exploiting Vulnerabilities With Metasploit Framework

Validate and confirm exploitability of vulnerabilities using the Metasploit Framework for risk-based prioritization and patch verification.

24.6k · bundle

Meeting Notes And Actions

Process meeting transcripts or rough notes into structured summaries with decisions, risks, and owner-tagged action items.

Pestel Analysis

Analyze political, economic, social, technological, environmental, and legal forces to identify external opportunities and threats for strategic planning.

Contract Review

Legal contract analysis using CUAD dataset (41 risk categories). Supports NDA, SaaS, M&A, employment, payment/merchant, and finder/broker agreements. Identifies red flags, suggests redlines, compares to market standards.

Plan a sprint with capacity estimation, story selection, dependency mapping, and risk identification. Use when preparing for sprint planning, estimating team capacity, selecting stories, or balancing sprint scope against velocity.

Isms Audit Expert

Guides internal and external ISMS audits for ISO 27001 compliance, including audit planning, control assessment, finding management, and certification support.

20.4k · bundle

Iso13485 Audit Prep

Pressure-tests medical-device QMS work with six traceability-obsessed questions before internal audits, regulatory reviews, or product launches.

Iso27001 Audit Prep

Pressure-tests an ISMS with six sample-driven questions to prepare for ISO 27001 internal, certification, or surveillance audits.

Prioritize Features

Rank a backlog of feature ideas by impact, effort, risk, and strategic alignment to identify the top 5 to pursue.

Track weekly funding rounds across configurable verticals with primary-source verification, per-round analysis, and risk assessment.

Analyzes sector rotation patterns and market cycle positioning using publicly available CSV data, with optional chart image analysis.

Options Strategy Advisor

Analyze and simulate options trading strategies using Black-Scholes pricing, Greeks calculation, and risk management guidance.

Prüft W&I-Versicherungsfälle in Corporate-Kanzleien: Frist, Form, Zuständigkeit, Rechtsweg und Sofortmaßnahmen; liefert eine Fristen- und Risikoampel mit Sofortschritten.

Scores genetic compatibility between all male-female pairings in a Genomebook generation, ranking optimal mating pairs based on heterozygosity, trait complementarity, and disease risk.

Delivery Release Gate

Use `analysis-agent` for release decisions, `task-agent` for delivery artifacts, or `review-agent` for readiness on deployment, migration, rollback, or production risk. Skip local work with no release decision.

AI Code Review Refactor

Use `review-agent` on implementation or repair diffs for hallucinated APIs, unsupported assumptions, unsafe abstractions, and dependency or regression risks. Skip work without a diff or after reviewer edits.

Loop Engineering

Patterns, conventions, and guardrails for the closed-loop systems in AegisNex. Covers the AI intelligence graph, Guardian auto-restart, multi-agent orchestration, incident lifecycle, self-improvement memory, and risk/policy gates.

Grant Proposal Workpackage Builder

Use when a research proposal needs work packages, milestones, deliverables, a timeline, a risk register, and budget-justification scaffolding, while keeping scientific claims and feasibility honest and human-owned.

ruslan-strazhnyk

Dependency Audit

Audit project dependencies for risk — known-vulnerable versions, unpinned ranges, abandoned packages, and badly outdated majors. Reads package.json, requirements.txt, go.mod, Cargo.toml. Pure Claude Code, no signup.