wr-risk-scorer:update-policy

To generate an ISO 31000 compliant risk policy, this skill drafts a RISK-POLICY.md file by assessing your project context to derive tailored risk appetites, impact levels, and likelihood levels for consistent scoring.

Maintaining risk scoring governance and auditability is achieved by tracking the last reviewed date within the RISK-POLICY.md, ensuring your project retains a repeatable framework for ongoing policy maintenance and gate decisions.

Structuring impact and likelihood levels for pipeline actions involves drafting thresholds within the risk policy that inform gate decisions for commits, pushes, and releases based on derived project context.

Yes, you can validate drafted risk levels against the risk-scorer agent contract. The skill implements a specific validation step to ensure your drafted policy aligns with the agent's scoring requirements.

You need a structured risk policy for problem management when your project requires consistent risk scoring and governance guidance to inform automated pipeline actions and ongoing policy maintenance.

Risk policy generation requires existing project context to derive appropriate risk appetites, impact levels, and likelihood levels, ensuring the drafted RISK-POLICY.md is tailored to your specific governance needs.