What problem does it solve?
It helps you systematically surface technical, operational, scalability, security, delivery, and AI/spec ambiguity risks early—so you can decide what must be resolved now versus what can be monitored.
Core Features & Use Cases
- Risk identification across six categories: Finds design and plan vulnerabilities spanning architecture, delivery workflows, operations, security boundaries, and AI/spec uncertainty.
- Evidence-based classification: Produces a risk register that ties each risk to concrete evidence from the reviewed artifact and flags gaps as
EVIDENCE: INSUFFICIENT.
- Blocking vs acceptable outputs: Distinguishes
blocking risks (e.g., security breach or delivery failure likelihood) from acceptable risks, with mitigations for items above medium.
- Decision traceability artifacts: Recommends complementary artifacts like ADRs, threat modeling, rollout plans, observability plans, technical spikes, and test strategies when relevant.
- Consistent structured delivery: Generates a structured risk assessment summary and a prioritized risk register with impact/probability/overall scoring.
Quick Start
Use the risk-assessor skill to assess risks in the provided architecture or specification and produce a prioritized risk register with mitigations for blocking items.
