How do I install the Cyber Risk skill?

Run npx skillmds@latest add ashutoshsrivastava17/cyber-risk in your terminal (requires Node.js), paste this page's agent-chat prompt into Claude, Cursor, or any MCP-connected agent, or download the SKILL.md file and copy it into your agent's skills directory.

Is Cyber Risk safe to use?

This skill has not completed SkillMD's automated safety review yet. SkillMD never runs a skill's scripts for you; review the SKILL.md before installing.

Which AI agents work with Cyber Risk?

This skill is tagged as working with Claude Code, Claude.ai, OpenAI Codex. SKILL.md is an open format, so most agents that read a skills directory can load it too.

Is Cyber Risk free to use?

Yes. Installing skills from SkillMD is free, and the skill stays under its author's original license.

Who published Cyber Risk?

ashutoshsrivastava17 (@ashutoshsrivastava17) published this skill. Their other Agent Skills are listed on their SkillMD profile.

Cyber Risk by ashutoshsrivastava17 — Agent Skill

Name: Cyber Risk
Author: ashutoshsrivastava17

Cyber Risk

Assess cyber risks — threat landscape, vulnerability assessment, asset criticality, attack scenarios, quantitative risk estimation (FAIR), and mitigation. TRIGGER when: user says /cyber-risk or asks about cybersecurity risk assessment.

File contents

cyber risk

Process

Step 1: Define Scope

Identify the boundaries of what to assess, who is involved, and what assets/processes are in scope.

Step 2: Identify Risks/Requirements

Risk/Requirement	Category	Severity	Likelihood
[item]	[category]	H/M/L	H/M/L

Step 3: Assess Current Controls

Control	Effectiveness	Gap
[control]	Strong/Adequate/Weak	[description]

Step 4: Prioritize Actions

Action	Impact	Effort	Priority
[action]	H/M/L	H/M/L	P1/P2/P3

Step 5: Develop Mitigation Plan

Risk	Mitigation	Owner	Timeline
[risk]	[strategy]	[name]	[date]

Step 6: Monitor and Report

Metric	Target	Frequency
[KRI/metric]	[threshold]	Weekly/Monthly/Quarterly

Output Format

## cyber risk: [Scope]
### Risk Summary: [Key findings]
### Controls: [Current state assessment]
### Recommendations: [Prioritized actions]
### Monitoring: [KRIs and reporting cadence]

Quality Checklist

Scope clearly defined
Risks identified systematically
Current controls assessed for effectiveness
Recommendations prioritized by risk level
Monitoring plan established
Stakeholders reviewed findings

Edge Cases

For rapidly changing environments, increase assessment frequency
If data is limited, use qualitative assessment with expert judgment
For cross-organizational risks, coordinate with all affected parties
Adjust methodology based on regulatory requirements

---name: cyber-riskdescription: Assess cyber risks — threat landscape, vulnerability assessment, asset criticality, attack scenarios, quantitative risk estimation (FAIR), and mitigation. TRIGGER when: user says /cyber-risk or asks about cybersecurity risk assessment.---# cyber risk## Process### Step 1: Define ScopeIdentify the boundaries of what to assess, who is involved, and what assets/processes are in scope.### Step 2: Identify Risks/Requirements| Risk/Requirement | Category | Severity | Likelihood ||-----------------|----------|----------|-----------|| [item] | [category] | H/M/L | H/M/L |### Step 3: Assess Current Controls| Control | Effectiveness | Gap ||---------|-------------|-----|| [control] | Strong/Adequate/Weak | [description] |### Step 4: Prioritize Actions| Action | Impact | Effort | Priority ||--------|--------|--------|----------|| [action] | H/M/L | H/M/L | P1/P2/P3 |### Step 5: Develop Mitigation Plan| Risk | Mitigation | Owner | Timeline ||------|-----------|-------|----------|| [risk] | [strategy] | [name] | [date] |### Step 6: Monitor and Report| Metric | Target | Frequency ||--------|--------|-----------|| [KRI/metric] | [threshold] | Weekly/Monthly/Quarterly |## Output Format```markdown## cyber risk: [Scope]### Risk Summary: [Key findings]### Controls: [Current state assessment]### Recommendations: [Prioritized actions]### Monitoring: [KRIs and reporting cadence]```## Quality Checklist- [ ] Scope clearly defined- [ ] Risks identified systematically- [ ] Current controls assessed for effectiveness- [ ] Recommendations prioritized by risk level- [ ] Monitoring plan established- [ ] Stakeholders reviewed findings## Edge Cases- For rapidly changing environments, increase assessment frequency- If data is limited, use qualitative assessment with expert judgment- For cross-organizational risks, coordinate with all affected parties- Adjust methodology based on regulatory requirements

Frequently asked questions