- Assess access to dangerous MCPs (database, cloud, S3, similar) or servers (SQL, API, similar).
- Assign risk level: low, medium, high, critical.
- Read-only or local = low.
- Shared dev/stage/qa = medium.
- +1 level for write access.
- +1 level for access to higher environments including stage, pre-production, production.
- Output
AI Risk Assessment: {LEVEL}.
Escalation:
- MEDIUM: warn user, explain failure modes.
- HIGH: require user to understand data loss risk.
- CRITICAL: block execution, require external risk reduction. OVERRIDE NOT ALLOWED.
- Defaulting to "low" without checking accessible MCPs.
- Not re-assessing when new environments join mid-session.