wr-risk-scorer:assess-external-comms

Assess outbound prose drafts for confidential-information leaks against RISK-POLICY.md.

4|1|Updated Apr 7, 2026
One-click install
npx skills add https://github.com/windyroad/agent-plugins --skill wr-risk-scorer-assess-external-comms
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: wr-risk-scorer:assess-external-comms
Source: https://github.com/windyroad/agent-plugins/tree/main/packages/risk-scorer/skills/assess-external-comms
Command: npx skills add https://github.com/windyroad/agent-plugins --skill wr-risk-scorer-assess-external-comms

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

On-demand external-comms risk review. Reviews a draft of an outbound prose tool call (gh issue/pr body, security advisory, npm publish content, or .changeset/*.md body) for confidential-information leaks per RISK-POLICY.md. Delegates to wr-risk-scorer:external-comms and pre-satisfies the external-comms-gate marker for the current session.

Core Features & Use Cases

  • On-demand risk review of outbound prose before posting to third-party channels.
  • Delegates to wr-risk-scorer:external-comms with pre-satisfied gate.
  • Supports drafts for gh issues/pr bodies, security advisories, npm publish content, and changeset bodies.
  • Returns a structured risk verdict and a risk key for audit.

Quick Start

Provide the draft body or a surface hint and let the tool run wr-risk-scorer:external-comms to return a structured risk verdict.

Frequently Asked Questions about wr-risk-scorer:assess-external-comms

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I check an outbound GitHub issue body for confidential information leaks?

To check an outbound GitHub issue body for confidential information leaks, provide the draft text to assess it against RISK-POLICY.md, returning a structured risk verdict and audit key before posting.

What is the best way to preflight npm publish content for secret-leak risk?

Preflighting npm publish content for secret-leak risk involves validating the draft body against RISK-POLICY.md, executing the external-comms gate, and returning a structured risk verdict to prevent leaks.

Can I use this to review security advisories before publishing to third-party channels?

Yes, you can review security advisories before publishing to third-party channels by passing the advisory draft for confidential-information assessment, which delegates to the external-comms gate and yields a risk verdict.

Does this risk assessment tool work with .changeset markdown files?

This risk assessment tool works with .changeset/*.md bodies, reviewing the markdown content for confidential-information leaks per RISK-POLICY.md before changesets are committed or published.

How do I get a structured risk verdict for a pull request body before posting?

To get a structured risk verdict for a pull request body, submit the draft prose for validation against the RISK-POLICY.md, pre-satisfying the external-comms gate marker for your current session.

What do I need to provide to run an external-comms risk review on a draft?

To run an external-comms risk review on a draft, you need to provide the draft body or a surface hint, allowing the tool to delegate the assessment and return a structured risk verdict with an audit key.