# Governance Upgrade Risk

> Detects whether governance or upgrade control is concentrated, weakly separated, or capable of undermining user or integrator trust. Internal specialist module for governance risk review.

- Skill: `newmanxbt/governance-upgrade-risk` (Agent Skill)
- Install (CLI): `npx skillmds@latest add newmanxbt/governance-upgrade-risk`
- Raw SKILL.md: https://api.skillmd.com/api/skills/newmanxbt/governance-upgrade-risk/raw
- Safety review: pending
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: Coding & Dev Tools
- Author: newmanxbt (https://skillmd.com/u/newmanxbt)
- Updated: 2026-09-17
- Page: https://skillmd.com/skills/newmanxbt/governance-upgrade-risk

---


# Governance Upgrade Risk

Governance and upgradeability trust review skill.

## Purpose

Detect whether governance or upgrade control is concentrated, weakly separated,
or capable of undermining user or integrator trust.

## Focus

This skill is responsible for:

- single-key upgrade authority concentration,
- emergency admin abuse surface,
- governance bypass paths,
- unsafe config authority patterns,
- and migration or initialization flows that weaken trust.

## What To Look For

- upgrade power held by an unsafe authority structure
- governance assumptions not matched by enforced control
- emergency powers that can bypass trust assumptions silently
- initialization or migration paths that can rewrite critical state

## Output Shape

Each finding should state:

- what trust assumption governance appears to promise,
- how actual control differs,
- and whether another agent should refuse to integrate or allocate through it.