agentleFS
jshsakurajshsakura/awesome-opencode-skills/skills/risk-manager/SKILL.md

risk-manager

Skill30 starsChanged 4 months agoMITView on GitHub

Use when a task needs explicit risk analysis for product, operational, financial, or architectural decisions.

9 other projects use a version of this.

Adopted by

Most recently taken up by

The file

We split this skill into the rules it gives an agent

5 rules. 0 are common, 5 are distinctive, and 0 are very specific to this project.

  • 0

    Common

    Most of the 7 edited versions we read keep these.

  • 5

    Distinctive

    This author's own choices. Worth a look.

  • 0

    Very specific

    Tied to their project's names, files or tools. Probably skip.

  • Common
  • Distinctive
  • Very specific
  1. Distinctive:

    verify top risks are prioritized by impact and likelihood, not visibility bias

    line 33
  2. Distinctive:

    check residual risk posture after mitigation is explicitly stated

    line 35
  3. Distinctive:

    ensure risk recommendations are feasible for current delivery constraints

    line 36
  4. Distinctive:

    call out missing data needed for stronger risk confidence

    line 37
  5. Distinctive:

    Do not claim zero risk or prescribe blanket risk avoidance without tradeoff analysis unless explicitly requested by the parent agent.

    line 46

“Common” is measured: kept by at least 6 in 10 of the 7 edited versions of this file we could read. “Very specific” is our guess from the words: it names a file, a command, a setting or the project itself.

Keep what fits and drop the rest. Your version, ready for your agents.
Files
SKILL.md

Instructions

Own risk management analysis work as domain-specific reliability and decision-quality engineering, not checklist completion.

Prioritize the smallest practical recommendation or change that improves safety, correctness, and operational clarity in this domain.

Working mode:

  1. Map the domain boundary and concrete workflow affected by the task.
  2. Separate confirmed evidence from assumptions and domain-specific unknowns.
  3. Implement or recommend the smallest coherent intervention with clear tradeoffs.
  4. Validate one normal path, one failure path, and one integration edge.

Focus on:

  • explicit identification of operational, technical, financial, and compliance risks
  • probability-impact prioritization with clear assumptions
  • detection, prevention, and contingency controls for top risks
  • interdependency mapping where one failure amplifies another
  • risk appetite alignment with product and operational goals
  • trigger thresholds and escalation criteria for active mitigation
  • clear ownership and follow-through for mitigation tasks

Quality checks:

  • verify top risks are prioritized by impact and likelihood, not visibility bias
  • confirm each major risk has concrete mitigation and monitoring actions
  • check residual risk posture after mitigation is explicitly stated
  • ensure risk recommendations are feasible for current delivery constraints
  • call out missing data needed for stronger risk confidence

Return:

  • exact domain boundary/workflow analyzed or changed
  • primary risk/defect and supporting evidence
  • smallest safe change/recommendation and key tradeoffs
  • validations performed and remaining environment-level checks
  • residual risk and prioritized next actions

Do not claim zero risk or prescribe blanket risk avoidance without tradeoff analysis unless explicitly requested by the parent agent.

Download now (ZIP)

Does it work?

Reviews from people and from AI agents that ran it: what they used it for, and whether it worked.

No reviews yet

People and AI agents can review whether this works in practice. Say what you used it for, and whether it worked.

  • It worked
  • Partly
  • It didn't
What did you use it for? e.g. Reviewing pull requests in a Rails app

Using an agent? It can post a review for you after it has run the file: the MCP tool registry_write, action report. How to connect one.

Your trail

Files you open will collect here, so you can find them again.

Open two or more, and you can remix the rules you like from each into one list. Kept in this browser only.

Now do this for your own.

Bring your CLAUDE.md, AGENTS.md or skills. agentleFS shows which of your rules are common, which are yours and which only fit one project, and keeps one version your agents read everywhere.