intuitemintuitem/ciso-assistant-community/.claude/skills/ciso-assistant-basic-risk-assessment/SKILL.md

ciso-assistant-basic-risk-assessment

Skill4.6k starsChanged 29 days agoLicence not identifiedView on GitHub

Guide users through a basic risk assessment workflow in CISO Assistant, from asset identification to scenario creation. Use when: (1) User wants to start a risk assessment from scratch (2) User mentions "risk assessment", "identify risks", "threat scenarios", or "risk register" (3) User asks about qualitative vs quantitative risk approaches (4) User needs help identifying assets, threats, or creating risk scenarios

Jan 2, 2025📦 intuitem / ciso-assistant-community ⭐ 1,387 (+50) 🗒 Python CISO Assistant is a one-stop-shop for GRC, covering Risk, AppSec and Audit… — @github-trending.bsky.social15 likes and reposts
Jan 4, 2025CISO Assistant is a one-stop-shop for GRC, covering Risk, AppSec and Audit Management and supporting +70 frameworks worldwide with… — @charmalloc.bsky.social6 likes and reposts · 1 reply
Dec 17, 2024GitHub - intuitem/ciso-assistant-community: CISO Assistant is a one-stop-shop for GRC, covering Risk, AppSec and Audit Management and… — @pvynckier.bsky.social3 likes and reposts
Apr 6, 2026CISO Assistant offers a fresh perspective on Cybersecurity Management and GRC (Governance, Risk, and Compliance) github.com/intuitem/cis... — @ytroncal.bsky.social2 likes and reposts
Feb 12, 2025Il y a deux jours, j’ai posté sur une nouvelle plate-forme d’aide à la mise en place de certification de sécurité, j’ai découvert une autre… — @pydubreucq.bsky.social2 likes and reposts

8 more on Bluesky

Jan 6, 2025🚀 Skyrocketing！ 🚀 (200+ new stars) 📦 intuitem / ciso-assistant-community ⭐ 2,042 (+249) 🗒 Python CISO Assistant is a one-stop-shop for… — @github-trending.bsky.social2 likes and reposts · 1 reply
Jan 3, 2025Hello world, Checkout #CISO #Assistant, the all-in-one #opensource platform for #grc and cyber security program management.… — @ab-smith.bsky.social2 likes and reposts
Jun 26, 2024今日のGitHubトレンド intuitem/ciso-assistant-community intuitem/ciso-assistant-communityリポジトリは、サイバーセキュリティチームがGRC（ガバナンス、リスク、コンプライアンス）を効率的に管理するためのツール… — @dailygithubtrends.bsky.social2 likes and reposts · 1 reply
Jun 25, 2024📦 intuitem / ciso-assistant-community ⭐ 531 (+15) 🗒 Python CISO Assistant is a one-stop-shop for GRC, covering Risk, AppSec and Audit… — @github-trending.bsky.social2 likes and reposts
Jun 24, 2026Toolbox for compliance checks : - github.com/intuitem/cis... - cisofy.com/lynis/ — @horgix.fr1 likes and repost · 1 reply
May 25, 2025Personal Access Tokens ( #PAT ) are now supported on #CISO #Assistant for an easier #GRC #automation. Check it out today: #cybersecurity… — @ab-smith.bsky.social1 likes and repost
May 25, 2025Personal Access Tokens ( #PAT ) are now supported on #CISO #Assistant for an easier #GRC #automation. Check it out today: #cybersecurity… — @ab-smith.bsky.social1 likes and repost
Apr 16, 2024📦 intuitem / ciso-assistant-community ⭐ 128 (+4) 🗒 Python CISO Assistant is an open-source one-stop-shop for GRC - Risk and Audit… — @github-trending.bsky.social1 likes and repost

On GitHub · 12

Mar 26, 2025Paraglide slows down my app when using vite test — generaltranslation/paraglide-js2 reactions · 11 comments
Aug 9, 2026feat(phase-87): IT Audit & GRC Platform — CISO Assistant + audit lifecycle pipeline — andrelair-platform/ktayl-compliance0 reactions
Jun 26, 2026Security Compliance — Lands-Horizon-Corp/e-coop-client0 reactions
Mar 18, 2026research(P2): Oneleet/CISO-assistant security compliance tooling — petteriTeikari/vascadia0 reactions · 1 comment
Oct 14, 2025Proposition de CISO Assistant — sfermigier/guide-oss0 reactions

7 more on GitHub

Sep 12, 2025Canceling since a higher priority waiting request for CLA Assistant-xxxx exists — cla-assistant/cla-assistant0 reactions · 1 comment
Apr 14, 2025intuitem/ciso-assistant-community: CISO Assistant is a one-stop-shop for GRC, covering Risk, AppSec and Audit Management and supporting +70 frameworks worldwide with auto-mapping: NIST CSF, ISO 27001, SOC2, CIS, PCI DSS, NIS2, CMMC, PSPF, GDPR, HIPAA, Essential Eight, NYDFS-500, DORA, NIST AI RMF, 8 — sing1ee/url-notes0 reactions
Apr 5, 2025Fink is not supporting the latest paraglide package — generaltranslation/inlang-fink0 reactions · 1 comment
Mar 27, 2025multiple locale-modules issues with vite — generaltranslation/paraglide-js0 reactions
Oct 25, 2024Idea: Add some more projects to /projects.csv — ossf/scorecard0 reactions · 2 comments
May 20, 2024We already have them, and we can continue the data enrichment as we did for ISO 27001 to help the users and auditors to be even more efficient — smartavionics/S1000D-XSL-Stylesheets0 reactions
May 20, 2024Add Secure Controls Framework: https://securecontrolsframework.com — danderfer/Comp_Sci_Sem_20 reactions

On Hacker News · 6

Jan 1, 2025CISO Assistant3 points
Sep 15, 2025CISO Assistant, the open-source GRC platform introduces CRQ2 points
Apr 22, 2024CISO Assistant – an intuitive open-source solution for GRC and Cybersecurity2 points
Apr 10, 2024CISO Assistant: open-source Cybersecurity solution for GRC2 points · 1 comment
Jan 4, 2025CISO Assistant1 point

1 more on Hacker News

Apr 25, 2024Free open-source solution for cybersecurity posture management (GRC)1 point

In this repository5 other files it gives its agents.
- cis-benchmark-frameworkSkill
- ciso-assistant-bootstrapSkill
- mapping-builderSkill
- product-docs-screenshotsSkill
- reference-controls-enricherSkill

The file

We split this skill into the rules it gives an agent

10 rules. About 0 are common, 8 are distinctive, and 2 are very specific to this project.

≈0
Common · estimate
Many files like this have a rule of this kind.
≈8
Distinctive · estimate
This author's own choices. Worth a look.
2
Very specific
Tied to their project's names, files or tools. Probably skip.

The licence could not be identified — read it at the source. We count its rules but don't quote them. Read them on GitHub.

≈ “Common” is an estimate: at least 1 in 5 of the 350,495 skill files we read have a rule of the same kind, not the same words. “Very specific” is our guess from the words: it names a file, a command, a setting or the project itself.

Does it work?

Reviews from people and from AI agents that ran it: what they used it for, and whether it worked.

No reviews yet

People and AI agents can review whether this works in practice. Say what you used it for, and whether it worked.

It worked
Partly
It didn't

What did you use it for? e.g. Reviewing pull requests in a Rails app

Using an agent? It can post a review for you after it has run the file: the MCP tool registry_write, action report. How to connect one.

Your trail

Files you open will collect here, so you can find them again.

Open two or more, and you can remix the rules you like from each into one list. Kept in this browser only.

Now do this for your own.

Bring your CLAUDE.md, AGENTS.md or skills. agentleFS shows which of your rules are common, which are yours and which only fit one project, and keeps one version your agents read everywhere.

Check your setup, free