Results for “risk-assessment”
86 skills
mukul975 conducting-cyber-risk-assessment-with-nist-800-30
Conduct a defensible cybersecurity risk assessment using the NIST SP 800-30 Rev 1 methodology, from scoping and threat identification to risk determination and communication.
24.6k · bundle
construct-ai-primary risk-assessment
Use when evaluating potential risks before making decisions, starting initiatives, or implementing changes. This skill provides a structured risk assessment framework for identifying, analyzing, and responding to risks across all domains.
0
georgeqle risk-register
Broad risk assessment — key-person, technical, regulatory, competitive, financial, and execution risks beyond product/market
1 · bundle
mukul975-2 dpia-risk-scoring
Provides a structured risk scoring methodology for Data Protection Impact Assessments aligned with ENISA threat taxonomy and ISO 29134. Covers likelihood and severity assessment, risk matrix construction, inherent vs residual risk calculation, and risk appetite thresholds per EDPB WP248rev.01 guidance. Keywords: risk scoring, DPIA risk matrix, likelihood, severity, ENISA, ISO 29134, residual risk, risk appetite.
228 · bundle
alirezarezvani ai-act-readiness
Guides AI system compliance with the EU AI Act through six article-cited questions covering prohibited practices, risk classification, conformity assessment, role obligations, transparency, and GPAI systemic risk.
20.4k
tools-only 065-data-61a12d5f
Guides data protection impact assessments under GDPR Article 35, covering mandatory triggers, risk evaluation, and mitigation steps.
7 · bundle
More results
mukul975-2 hipaa-risk-analysis
Conducts HIPAA risk analysis per 45 CFR §164.308(a)(1) following OCR guidance methodology. Covers threat identification, vulnerability assessment, likelihood and impact determination, risk scoring, and mitigation planning for electronic protected health information. Keywords: HIPAA risk analysis, OCR guidance, threat assessment, vulnerability, risk management, ePHI.
228 · bundle
mukul975 performing-privacy-impact-assessment
Automates privacy impact assessments including data flow mapping, risk scoring, GDPR/CCPA compliance checks, and remediation planning using the NIST Privacy Framework and ICO DPIA guidance.
24.6k · bundle
nickgallick risk-register
Identify, assess, and mitigate project risks across technical, scope, dependency, and timeline categories using a structured register and escalation rules.
0
mukul975-2 ai-dpia
Conducts Data Protection Impact Assessments for AI and ML systems per EDPB Guidelines 04/2025 on AI processing. Covers training data lawfulness evaluation, model risk assessment, automated decision triggers, and AI-specific DPIA methodology. Keywords: AI DPIA, machine learning impact assessment, EDPB AI guidelines, model risk, training data.
228 · bundle
tradermonty market-environment-analysis
Analyzes global market conditions across US, European, and Asian indices, forex, commodities, and economic indicators to produce structured market reports with risk sentiment assessment.
2.3k · bundle
dokhacgiakhoa risk-manager
Monitor portfolio risk, R-multiples, and position limits. Creates hedging strategies, calculates expectancy, and implements stop-losses. Use PROACTIVELY for risk assessment, trade tracking, or portfolio protection.
505
phuryn identify-assumptions-new
Identify risky assumptions for a new product idea across 8 risk categories including go-to-market, strategy, and team.
22.6k
trailofbits supply-chain-risk-auditor
Audits project dependencies for supply chain risks including single maintainers, unmaintained packages, low popularity, high-risk features, past CVEs, and missing security contacts.
6k · bundle
galyarderlabs contract-review
Analyze contracts to identify risks, unfavorable terms, and negotiation opportunities before signing.
20
drnabeelkhan fedramp
Applies the FedRAMP framework to identify, assess, and mitigate security risks in systems, processes, and data handling.
2
deanpeters derisk-measurement-advisor
Identify what to measure, test, or track to de-risk a product or AI idea across internal and external risk dimensions.
5.6k
alirezarezvani eu-ai-act-specialist
Classify AI systems under the EU AI Act, determine conformity assessment routes, and track per-role obligations using reference scripts and Article-cited guidance.
20.4k · bundle
aaaaqwq legal
Think through any legal situation like a lawyer. Issue spotting, jurisdiction, risk assessment, actionable conclusions.
1 · bundle
nickgallick risk-management
Identifies, assesses, and mitigates risks at every phase of a development pipeline.
0
aaaaqwq risk-matrix
Identify and prioritize risks by impact and controllability. Use for risk management, project planning, and strategic decision support.
1 · bundle
drnabeelkhan gdpr
Applies the GDPR framework to identify, assess, and mitigate security risks in systems, processes, and data handling.
2
gtynnn060110-hash risk-metrics-calculation
Calculate portfolio risk metrics including VaR, CVaR, Sharpe, Sortino, and drawdown analysis. Use when measuring portfolio risk, implementing risk limits, or building risk monitoring systems.
6
machenjie high-risk-design-review
Use `review-agent` for a high-risk Engineering Brief when a critical path, architecture boundary, material risk, or multiple downstream tasks need deeper design evidence. Skip ordinary work without those signals.
4 · bundle
phuryn identify-assumptions-existing
Stress-test a feature idea for an existing product by surfacing risky assumptions across Value, Usability, Viability, and Feasibility using multi-perspective devil's advocate thinking.
22.6k
phuryn pre-mortem
Run a pre-mortem risk analysis on a PRD or launch plan, categorizing risks as Tigers (real problems), Paper Tigers (overblown concerns), and Elephants (unspoken worries), then classifying by urgency and creating action plans.
22.6k
machenjie threat-modeling
`analysis-agent`/`task-agent`/`review-agent`: use for changed assets, trust boundaries, reachable abuse paths, impact, or control placement; skip without a security delta.
4 · bundle
dracounion pre-mortem-analysis
在启动一个重要项目或关键行动之前，用于主动识别和防范风险
11 · bundle
danielpradilla assumption-risk-ledger
Map product assumptions by risk, confidence, evidence, and next validation step.
0
github threat-model-analyst
Performs STRIDE-A threat model analysis of repositories and systems, producing architecture overviews, DFD diagrams, prioritized findings, and executive assessments. Supports both single analysis and incremental updates with change tracking.
36.2k · bundle
github impediment-prioritization
Ranks any list of impediments and their countermeasures using a value-stream scoring model (ROI, Cost to Implement, Ease of Deployment, Risk Factor) and a fixed prioritization formula.
36.2k · bundle
drnabeelkhan pci-dss
Applies the PCI-DSS framework to identify, assess, and mitigate security risks in systems, processes, and data handling.
2
phuryn strategy-red-team
Red-team a PRD, roadmap, or strategy by attacking its load-bearing assumptions before reality does, ranking failure modes by impact, likelihood, and cheapness to test.
22.6k
phuryn prioritize-assumptions
Prioritize assumptions using an Impact × Risk matrix and suggest targeted experiments for each.
22.6k
a5c-ai security-review
Security vulnerability assessment identifying OWASP risks, injection vectors, authentication issues, and data exposure with severity classification.
1.7k · bundle
alirezarezvani ciso-advisor
Quantify security risks in dollars, build compliance roadmaps (SOC 2, ISO 27001, HIPAA, GDPR), and justify security budgets for growth-stage companies.
20.4k · bundle