Scan repository code for failure modes and rank findings by severity.
npx skills add https://github.com/dimakis/mitzo --skill risk-scan-dimakis
Please help me install this Agent Skill. Skill: risk-scan Source: https://github.com/dimakis/mitzo/tree/main/skills/risk-scan Command: npx skills add https://github.com/dimakis/mitzo --skill risk-scan-dimakis
This Skill helps you detect hidden software risks early by scanning the specified code area for missing error handling, edge-case gaps, weak test coverage, unsafe assumptions, and security issues.
Run risk-scan against the relevant directory (for example, a backend route folder) to get a ranked list of failure modes with severity and mitigation suggestions.
High-intent search queries and answers about installing and using this skill.
To find missing error handling and edge cases, scan the specified repository area to detect unhandled promise rejections, missing null checks, uncaught exceptions, and boundary value gaps, producing a ranked list of failure modes by severity.
Static analysis for security risks identifies injection vectors, path traversal vulnerabilities, unvalidated inputs, and potential secret exposure by scanning source code without executing it, highlighting unsafe assumptions in critical modules.
Check test coverage for untested error branches by scanning critical code paths to flag missing tests, ensuring that both standard execution routes and failure scenarios receive adequate test completeness validation.
Yes, risk-focused code review works for specific directories or file sets by accepting directory paths as arguments, enabling targeted analysis of critical modules where robustness, correctness, and security are uncertain.
No, static analysis during risk assessment enforces read-only analysis without making file changes, ensuring the specified repository area remains unmodified while producing ranked findings and mitigation guidance.
AlbertLin821Analyze git-staged changes to map upstream dependencies and affected execution flows.
peancharoenAnalyze spec.md and plan.md to surface edge cases and refinement requirements.
KanakMalpaniRun build, static analysis, tests, security scans, and diff review for Spring Boot projects.
macaughDetects injection, memory safety and authorization flaws in multiple languages.
