Plugins

8 plugins

Plan a sprint by estimating capacity, selecting stories, and identifying risks.

3 skills · plugin

MCP Security Audit Pipeline

Audit MCP servers for secrets exposure, shell injection, and supply chain risks.

12 skills · plugin

Sprint Planning Pipeline

Install this pack to plan a sprint by estimating capacity, selecting stories, and identifying risks.

3 skills · plugin

Validate Product Idea

Validate a product idea by clarifying intent, identifying risky assumptions, and designing experiments to test them.

4 skills · plugin

Secure Google Cloud Workload

Assesses security requirements, identifies risks, and provides actionable recommendations for IAM, network, and data protection.

4 skills · plugin

Sprint Planning Pack

For scrum masters and PMs planning sprints: plan sprint, run retro, and facilitate pre-mortem risk analysis.

9 skills · plugin

@alirezarezvani

14 regulatory affairs & quality management skills for HealthTech/MedTech: ISO 13485 QMS, MDR 2017/745, FDA 510(k)/PMA, GDPR/DSGVO, ISO 27001 ISMS, CAPA management, risk management, clinical evaluation, SOC 2 compliance.

10 skills · plugin

@alirezarezvani

Business Operations

Internal BizOps domain. v2.8.0 ships 7 skills: orchestrator + process-mapper (BPMN/bottleneck/cycle-time, Lean+TOC) + vendor-management (scorecard+SLA+3rd-party risk, NIST SP 800-161/ISO 27036) + capacity-planner (Erlang-C queueing math for ops teams, NOT engineering) + internal-comms (ADKAR+Kotter 8-step, NOT marketing) + knowledge-ops (SOP+runbook+KB hygiene with 5W2H, context: fork) + procureme

3 skills · plugin

Results for “risk”

463 skills

Pestle Analysis

Evaluate macro-environmental factors across Political, Economic, Social, Technological, Legal, and Environmental dimensions for strategic planning and market entry assessment.

Analyzes code for logical errors, race conditions, security vulnerabilities, and algorithmic flaws using structured reasoning across 9 risk categories.

Generate comprehensive Product Requirements Documents (PRDs) for software systems and AI-powered features, including executive summaries, user stories, technical specifications, and risk analysis.

Context Compression

Optimizes long-running agent sessions with structured context compression, summarization, and durable handoff summaries that preserve decisions, files, risks, and next actions.

16.9k · bundle

Query a pre-indexed codebase via CLI to understand structure, find symbols, assess change impact, debug failures, and evaluate PR risk.

QA lead skill for validation strategy, risk-based evidence planning, and cross-role quality governance. It must not request new or updated test cases unless the user explicitly asks for test authoring.

srednoff888-art

Performance Sre Agent

Use this skill for performance, reliability, observability, SLO risk, production diagnostics. Trigger when the task involves agent profile work related to Performance SRE Agent, implementation, audits, debugging, strategy, or validation.

Sales Sales Deal Strategist

Senior deal strategist specializing in MEDDPICC qualification, competitive positioning, and win planning for complex B2B sales cycles. Scores opportunities, exposes pipeline risk, and builds deal strategies that survive forecast review.

Pressure-tests AI Management Systems against ISO 42001 with six forcing questions for certification readiness, internal audits, and new-system onboarding.

Scans agent skills for security issues including prompt injection, malicious scripts, excessive permissions, secret exposure, and supply chain risks.

Building Patch Tuesday Response Process

Establish a structured operational process to triage, test, and deploy Microsoft Patch Tuesday security updates within risk-based remediation SLAs.

24.6k · bundle

Reviews code through the lens of 12 classic software engineering books, catching design smells, coupling issues, and architectural risks that linters miss.

mariadb-corporation

Mariadb Replace

Explains MariaDB's REPLACE statement: its delete-then-insert behavior, when it triggers, data-loss risks, and the upsert alternative. Use when writing or reviewing REPLACE statements.

Proceed through ordinary ambiguity by making reasonable assumptions, keeping momentum, validating as you go, and ending with a clear recap of decisions, changes, verification, and residual risk.

Performing GRAPHQL Depth Limit Attack

Test GraphQL APIs for depth limit vulnerabilities by sending deeply nested recursive queries to identify denial-of-service risks.

24.6k · bundle

Alphagbm Pnl Simulator

Simulates profit and loss for option positions across underlying price, implied volatility, and time to expiration, generating diagrams, breakeven analysis, and probability distributions.

Provides regulatory compliance assessments across data privacy, AI ethics, and localization laws, producing structured outputs with risk scores and remediation status.

Whimsy Injector

Audits product flows to find delight opportunities, then specifies micro-interactions, animations, and usability risk assessments that balance playful design with functional clarity.

Legacy Code Safety

Guides adding characterization tests before modifying or refactoring untested legacy code, using the RGR workflow and strangler fig pattern to reduce risk.

Runs three parallel reviewers to find code reuse, quality, and efficiency issues in a diff, then applies safe fixes and reports risky ones.

AI/ML security playbook. Use when assessing model supply chain attacks (pickle RCE, poisoned weights), adversarial examples, model poisoning, model stealing, data privacy attacks (membership inference, model inversion), and autonomous agent security risks.

srednoff888-art

Security Hardening

Use this skill for auth boundaries, input validation, secrets, RLS, injection risks, destructive-action review. Trigger when the task involves security work related to Security Hardening, production implementation, audits, debugging, strategy, or validation.

srednoff888-art

Release Manager Agent

Use this skill for release readiness, rollback plans, changelogs, deployment checks, production risk. Trigger when the task involves agent profile work related to Release Manager Agent, implementation, audits, debugging, strategy, or validation.

srednoff888-art

Crypto Market Research

Use this skill for crypto market research, tokens, narratives, liquidity, risks, source verification. Trigger when the task involves crypto work related to Crypto Market Research, production implementation, audits, debugging, strategy, or validation.

Ata Lowest Tolerable Hc

Recommends using the lowest tolerable hydrocortisone dose to potentially decrease risks of metabolic and cardiovascular disease in central adrenal insufficiency. Triggers include managing a patient with central adrenal insufficiency requiring glucocorticoid replacement.

Specialized Legal Document Review

Comprehensive legal document review specialist for contracts, litigation documents, and real estate agreements — summarizing documents, flagging risk clauses, comparing contract versions, and checking compliance across any law firm size or practice area

Dependency Auditor

Audit and manage dependencies across multi-language projects by scanning for vulnerabilities, license conflicts, and transitive dependency risks, with safe-upgrade planning.

20.4k · bundle

Skill Security Auditor

Scan and audit AI agent skills for security risks before installation, producing a PASS/WARN/FAIL verdict with findings and remediation guidance.

20.4k · bundle

Security Threat Model

Performs repository-grounded threat modeling by enumerating trust boundaries, assets, attacker capabilities, abuse paths, and mitigations, then writes a concise Markdown threat model.

23.3k · bundle

Finance Based Pricing Advisor

Evaluate the financial impact of pricing changes using ARPU, conversion, churn risk, NRR, and payback analysis to make data-driven go/no-go decisions.

Guides the user through German summary proceedings (Mahnverfahren) under §§ 688 ff. ZPO, checking deadlines, form, jurisdiction, and legal remedies, and providing a deadline and risk assessment with immediate steps.

Analyzes institutional order flow, dark pool prints, and options flow sweeps to generate trade setups with defined entry, stop-loss, and target levels.

srednoff888-art

UX Researcher Agent

Agent profile for analyze target users, workflows, usability risks, research questions, and evidence gaps. Use when Codex needs a specialist agent perspective for planning, implementation, review, debugging, validation, or handoff in this domain.

Sales Sales Pipeline Analyst

Revenue operations analyst specializing in pipeline health diagnostics, deal velocity analysis, forecast accuracy, and data-driven sales coaching. Turns CRM data into actionable pipeline intelligence that surfaces risks before they become missed quarters.

construct-ai-primary

Threat Modeling

Use when designing new systems, features, or integrations to identify potential security threats and vulnerabilities before they are exploited. This skill provides a structured approach to threat identification, risk assessment, and mitigation planning.

Github Actions Hardening

Reviews and hardens GitHub Actions workflows against injection, privilege escalation, supply-chain, and token-scoping risks that pattern matchers miss.

36.2k · bundle