blast-radius-drill
Run the worst-case drill before an agent goes autonomous — the 'if this agent were fully hijacked right now, what's the damage' walk-through, the containment controls (caps, kill-switch, reversibility, isolation), and the recovery plan. Use when asked what's the worst my agent could do, run a blast-radius assessment, prepare for an agent going rogue, or am I ready to let this run unattended. Produces the worst-case walk-through, the containment controls, the reversibility audit, and the incident-recovery runbook.
npx skills add mohitagw15856/pm-claude-skills --skill blast-radius-drill --agent claude-code
Same command for any agent — swap --agent for codex, cursor, copilot.
Weekly change comes from our own snapshots, not the repository page — it measures attention, not adoption.
# Blast Radius Drill Skill Before an agent runs unattended, one question decides whether that's brave or reckless: *if this agent were fully hijacked right now — every permission turned against you — what is the total damage?* Most people never ask it, and find the answer during the incident. The drill asks it on purpose: walk the worst case through every capability, then build the containment that bounds it — caps that halt runaway loops, a kill-switch that stops it fast, reversibility so a bad run is undoable, and isolation so the damage can't spread. The goal isn't zero risk; it's *bounded, recoverable* risk, known in advance. ## What This Skill Produces - **The worst-case walk-through** — per capability, the maximum damage a fully-hijacked agent could do, made concrete - **The containment controls** — the caps, halts, and isolation that bound each worst case - **The reversibility audit** — which actions are undoable (and how) vs. irreversible (and thus gated or denied) - **The recovery runbook** — the kill-switch, the "what did it do" audit trail, and the restore steps — decided while calm ## Required Inputs Ask for these if not provided: - **The agent's capabilities and enviro
- What This Skill Produces
- Required Inputs
- Framework: The Drill
- Output Format
- The Worst Case (per capability, assuming full compromise)
- Containment Controls
- Reversibility Audit
- Recovery Runbook
- The Verdict
- Quality Checks
- Anti-Patterns
What does the blast-radius-drill skill do?
Run the worst-case drill before an agent goes autonomous — the 'if this agent were fully hijacked right now, what's the damage' walk-through, the containment controls (caps, kill-switch, reversibility, isolation), and the recovery plan. Use when asked what's the worst my agent could do, run a blast-radius assessment, prepare for an agent going rogue, or am I ready to let this run unattended. Produces the worst-case walk-through, the containment controls, the reversibility audit, and the incident-recovery runbook.
How do I install it?
Run `npx skills add mohitagw15856/pm-claude-skills --skill blast-radius-drill --agent claude-code` — it drops the skill into your project so the agent can pick it up. Swap the --agent value for codex, cursor or copilot if you use one of those.
Where does this skill come from?
From mohitagw15856/pm-claude-skills, a repository with 1,255 stars. We read it straight from the repository tree rather than a submitted listing, so what you see here is what is actually published.
Is a popular skill a good skill?
Not necessarily. Stars measure attention, not adoption — a repository can trend for a week and be abandoned. That is why we show the weekly change from our own snapshots next to the total, instead of a single flattering number.