risk-audit

Audit proposed changes for failure modes using FMEA scoring.

3|Updated Nov 19, 2025
One-click install
npx skills add https://github.com/meaganewaller/.dotfiles --skill risk-audit
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: risk-audit
Source: https://github.com/meaganewaller/.dotfiles/tree/main/home/.claude/skills/common/risk-audit
Command: npx skills add https://github.com/meaganewaller/.dotfiles --skill risk-audit

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill helps identify potential risks, failure modes, and edge cases associated with code changes or system modifications before they are deployed, ensuring production readiness and mitigating potential issues.

Core Features & Use Cases

  • Comprehensive Risk Assessment: Analyzes changes across data, availability, security, integration, and operational categories.
  • Failure Mode Analysis (FMEA): Quantifies risks using Severity, Occurrence, and Detection scores to calculate a Risk Priority Number (RPN).
  • Silent Failure Detection: Identifies patterns that could lead to undetected errors.
  • Edge Case Identification: Provides matrices for input, state, and timing edge cases.
  • Production Readiness Checklist: Guides users through pre-deployment checks.
  • Use Case: Before merging a pull request that modifies a critical API endpoint, use this skill to systematically think through what could go wrong, how likely it is, and how it would be detected, ensuring the change is safe to ship.

Quick Start

Use the risk-audit skill to audit the proposed changes for potential risks and failure modes.

Frequently Asked Questions about risk-audit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I conduct a FMEA risk assessment for code changes before deployment?

FMEA risk assessment for code changes involves scoring failure modes by Severity, Occurrence, and Detection to calculate a Risk Priority Number (RPN). This process systematically identifies potential issues across data, availability, security, and operational domains before deployment.

What is a production readiness checklist and when do I need it for a critical API?

A production readiness checklist is a pre-deployment validation tool used to ensure system stability and safety. You need it when modifying critical API endpoints to systematically verify that data, security, and operational requirements are met before shipping.

How do I identify edge cases and silent failures in a code review?

Identifying edge cases and silent failures in a code review requires analyzing input, state, and timing variations using structured matrices. This detects patterns that could lead to undetected errors and operational risks before merging changes.

Can I quantify security audit risks without a dedicated automated platform?

Yes, you can quantify security audit risks by applying Failure Mode and Effects Analysis (FMEA) manually. This method assigns Severity, Occurrence, and Detection scores to calculate a Risk Priority Number (RPN) for identified threats without automated tools.

What's the best way to audit failure modes across data and integration domains?

The best way to audit failure modes across data and integration domains is to perform a comprehensive risk assessment using FMEA. This approach evaluates potential disruptions across multiple categories and prioritizes them using calculated Risk Priority Numbers.