Plugins
8 pluginscurated
Plan Sprint
Plan a sprint by estimating capacity, selecting stories, and identifying risks.
3 skills · plugin
curated
MCP Security Audit Pipeline
Audit MCP servers for secrets exposure, shell injection, and supply chain risks.
12 skills · plugin
curated
Sprint Planning Pipeline
Install this pack to plan a sprint by estimating capacity, selecting stories, and identifying risks.
3 skills · plugin
curated
Validate Product Idea
Validate a product idea by clarifying intent, identifying risky assumptions, and designing experiments to test them.
4 skills · plugin
curated
Secure Google Cloud Workload
Assesses security requirements, identifies risks, and provides actionable recommendations for IAM, network, and data protection.
4 skills · plugin
curated
Sprint Planning Pack
For scrum masters and PMs planning sprints: plan sprint, run retro, and facilitate pre-mortem risk analysis.
9 skills · plugin
@alirezarezvani
Ra Qm Team
14 regulatory affairs & quality management skills for HealthTech/MedTech: ISO 13485 QMS, MDR 2017/745, FDA 510(k)/PMA, GDPR/DSGVO, ISO 27001 ISMS, CAPA management, risk management, clinical evaluation, SOC 2 compliance.
10 skills · plugin
@alirezarezvani
Business Operations
Internal BizOps domain. v2.8.0 ships 7 skills: orchestrator + process-mapper (BPMN/bottleneck/cycle-time, Lean+TOC) + vendor-management (scorecard+SLA+3rd-party risk, NIST SP 800-161/ISO 27036) + capacity-planner (Erlang-C queueing math for ops teams, NOT engineering) + internal-comms (ADKAR+Kotter 8-step, NOT marketing) + knowledge-ops (SOP+runbook+KB hygiene with 5W2H, context: fork) + procureme
3 skills · plugin
Results for “ris”
541 skillsDpia Risk Scoring
Provides a structured risk scoring methodology for Data Protection Impact Assessments aligned with ENISA threat taxonomy and ISO 29134. Covers likelihood and severity assessment, risk matrix construction, inherent vs residual risk calculation, and risk appetite thresholds per EDPB WP248rev.01 guidance. Keywords: risk scoring, DPIA risk matrix, likelihood, severity, ENISA, ISO 29134, residual risk, risk appetite.
228 · bundle
Risk Metrics Calculation
Calculate portfolio risk metrics including VaR, CVaR, Sharpe, Sortino, and drawdown analysis. Use when measuring portfolio risk, implementing risk limits, or building risk monitoring systems.
6
Risk Register
Broad risk assessment — key-person, technical, regulatory, competitive, financial, and execution risks beyond product/market
1 · bundle
Riscv
Development with Riscv: tools and best practices
2 · bundle
Risk Matrix
Identify and prioritize risks by impact and controllability. Use for risk management, project planning, and strategic decision support.
1 · bundle
Risk Register
Identify, assess, and mitigate project risks across technical, scope, dependency, and timeline categories using a structured register and escalation rules.
0
More results
Conducting Cyber Risk Assessment With Nist 800 30
Conduct a defensible cybersecurity risk assessment using the NIST SP 800-30 Rev 1 methodology, from scoping and threat identification to risk determination and communication.
24.6k · bundle
Supply Chain Risk Auditor
Audits project dependencies for supply chain risks including single maintainers, unmaintained packages, low popularity, high-risk features, past CVEs, and missing security contacts.
6k · bundle
Risk Assessment
Use when evaluating potential risks before making decisions, starting initiatives, or implementing changes. This skill provides a structured risk assessment framework for identifying, analyzing, and responding to risks across all domains.
0
Risk Management
Identifies, assesses, and mitigates risks at every phase of a development pipeline.
0
Hipaa Risk Analysis
Conducts HIPAA risk analysis per 45 CFR §164.308(a)(1) following OCR guidance methodology. Covers threat identification, vulnerability assessment, likelihood and impact determination, risk scoring, and mitigation planning for electronic protected health information. Keywords: HIPAA risk analysis, OCR guidance, threat assessment, vulnerability, risk management, ePHI.
228 · bundle
Assumption Risk Ledger
Map product assumptions by risk, confidence, evidence, and next validation step.
0
AI Act Readiness
Guides AI system compliance with the EU AI Act through six article-cited questions covering prohibited practices, risk classification, conformity assessment, role obligations, transparency, and GPAI systemic risk.
20.4k
Risk Manager
Monitor portfolio risk, R-multiples, and position limits. Creates hedging strategies, calculates expectancy, and implements stop-losses. Use PROACTIVELY for risk assessment, trade tracking, or portfolio protection.
505
Mixup Beyond Empirical Risk Minimization Arxiv 1710 09412v2
Mixup: Beyond Empirical Risk Minimization
6
Identify Assumptions New
Identify risky assumptions for a new product idea across 8 risk categories including go-to-market, strategy, and team.
22.6k
Derisk Measurement Advisor
Identify what to measure, test, or track to de-risk a product or AI idea across internal and external risk dimensions.
5.6k
Vendor Risk Scoring
Vendor privacy risk tiering methodology for processor management. Covers scoring factors including data volume, sensitivity, transfer locations, certifications, breach history, and control maturity with weighted risk calculation and tier assignment.
228 · bundle
Gwas Prs
Calculates polygenic risk scores from 23andMe or AncestryDNA genotype files using PGS Catalog scoring files, then estimates population percentiles and risk categories.
61
Dora Digital Operational Resilience Act
Applies the DORA framework to manage ICT risk and operational resilience for EU financial entities, covering governance, incident reporting, resilience testing, third-party risk, and threat intelligence sharing.
2
High Risk Design Review
Use `review-agent` for a high-risk Engineering Brief when a critical path, architecture boundary, material risk, or multiple downstream tasks need deeper design evidence. Skip ordinary work without those signals.
4 · bundle
Integrated Risk Manager
Use when implementing unified position sizing, Kelly criterion, or combining GARCH+Capital+Portfolio risk systems
3
Riso
High-fidelity ASCII/Braille rendering via the Risomorphism-1911 pipeline — edge-aware downsampling, presets, quality gates, and eikon mirror workflows
28 · bundle
Alphagbm Market Sentiment
Aggregates market-wide sentiment indicators including VIX, Put/Call ratio, Fear & Greed Index, market breadth, and sector rotation to classify the current regime as risk-on, risk-off, or neutral.
1.2k
Managing Third Party Vendor Risk
Build and run a third-party/vendor risk management program aligned to NIST SP 800-161 and NIST CSF 2.0: inventory, tier, assess, contract, monitor, and offboard vendors.
24.6k · bundle
Rice
RICE feature prioritization with scoring and capacity planning. Usage: /rice prioritize <features.csv> [options]
1
Redis
Redis caching patterns, pub/sub, sessions, rate limiting, and data structures.
1.7k · bundle
Lets Go Rss
Aggregate RSS feeds from YouTube, Vimeo, Behance, Twitter/X, Bilibili, Weibo, Douyin, Xiaohongshu, and Zhihu with incremental updates, deduplication, and AI classification.
99 · bundle
Redis Patterns
Quick reference for Redis best practices across common backend use cases, including caching strategies, rate limiting, distributed locks, pub/sub, streams, and connection management.
226k
Output Waehlen
Wählt den passenden rechtlichen Entwurfstyp für Mietrechtssachen und erstellt Dokumente mit Fristen- und Risikoanalyse.
1.5k
RAG Index Rebuild
Trigger a full or incremental reindex of the RAG corpus
1 · bundle
Rustls
rustls — modern, safe TLS implementation in pure Rust. Drop-in replacement for OpenSSL/native-tls in Rust apps. No C dependencies — perfect for mobile cross- compile and embedded targets. Covers ClientConfig + ServerConfig, certificate verification with webpki-roots, mTLS, custom verifier (cert pinning), ALPN negotiation (HTTP/2, HTTP/3), session resumption, integration with hyper + reqwest + tokio. USE WHEN: user mentions "rustls", "ClientConfig", "ServerConfig", "webpki-roots", "rustls-pemfile", "rustls cert pinning", "rustls mTLS", "rustls Tokio", "rustls hyper" DO NOT USE FOR: OpenSSL specifics - use OpenSSL skill (or platform TLS) DO NOT USE FOR: Apple/Windows native TLS - use platform-specific skills DO NOT USE FOR: Tor anonymous transport - use `network/arti` DO NOT USE FOR: TLS protocol theory - use OWASP / RFC docs
28
Rice
RICE feature prioritization with scoring and capacity planning. Usage: /rice prioritize <features.csv> [options]
6
Redis Patterns
Redis data structure patterns, caching strategies, distributed locks, rate limiting, pub/sub, and connection management for production applications.
0
Rice
Rice
3
Iros Workflow
Use when planning an IROS project timeline from venue fit through the spring paper deadline, the separate video deadline, the summer review silence, the June notification, the July camera-ready, IEEE Xplore publication, registration, and presentation, with backward-planning offsets for a real-robot paper on the fall IEEE/RSJ calendar.
1k