risk-scoring

Calculate multidimensional risk scores for code changes to automate review escalation.

47|10|Updated Feb 22, 2026
One-click install
npx skills add https://github.com/gonzalezpazmonica/pm-workspace --skill risk-scoring
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: risk-scoring
Source: https://github.com/gonzalezpazmonica/pm-workspace/tree/main/.claude/skills/risk-scoring
Command: npx skills add https://github.com/gonzalezpazmonica/pm-workspace --skill risk-scoring

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill automates the process of assessing the risk associated with code changes, ensuring that reviews are appropriately escalated and that security and quality standards are maintained without manual oversight.

Core Features & Use Cases

  • Automated Risk Assessment: Calculates a risk score based on multiple factors like file changes, module criticality, and security tags.
  • Tiered Review Routing: Directs code changes to different review levels (Low, Medium, High, Critical) based on their calculated risk score.
  • Use Case: When a developer submits a pull request that touches a critical security module and involves data migration, this skill will automatically assign it to a high-risk review tier, requiring a security team sign-off before merging.

Quick Start

Calculate the risk score for the current pull request and determine its review tier.

Frequently Asked Questions about risk-scoring

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate code review routing based on risk?

Automate code review routing by calculating a multidimensional risk score from task metadata signals like file changes and module criticality. A weighted scoring system then determines the appropriate review tier, directing code changes to Low, Medium, High, or Critical review levels automatically.

What is a multidimensional risk score for code changes?

A multidimensional risk score for code changes evaluates multiple factors such as file modifications, module criticality, and security tags. By applying a weighted scoring system to these extracted risk signals, it quantifies the potential impact of a pull request on security and quality standards.

How do I escalate pull requests that touch critical security modules?

Escalate pull requests touching critical security modules by applying a weighted risk scoring system to the extracted task metadata. When the calculation identifies high-risk signals like data migration or security tags, it automatically routes the code changes to a critical review tier requiring security team sign-off.

Can I use risk scoring to enforce security compliance in my QA pipeline?

You can use risk scoring to enforce security compliance in quality assurance pipelines. The skill calculates risk scores from task metadata and applies a weighted system to determine review tiers, ensuring that high-risk code changes meet security and quality standards without manual oversight.

Does automated review escalation work without manual oversight?

Automated review escalation works without manual oversight by extracting risk signals from task metadata and applying a weighted scoring system. This process calculates a risk score to determine the review tier, routing code changes to the appropriate level and maintaining security standards automatically.

What metadata is needed to calculate a risk score for a pull request?

Calculating a risk score for a pull request requires metadata containing risk signals such as file changes, module criticality, and security tags. The skill extracts these signals from task metadata and applies a weighted scoring system to determine the appropriate review tier and routing.