Agent skill · Security

risk-management

Risk identification, assessment matrices, mitigation strategies, BCP, and risk reporting

Cosmic Stack3,294★ · 2 repos on radarProfile →
claude-codeMIT
Install
npx skills add cosmicstack-labs/mercury-agent-skills --skill risk-management --agent claude-code

Same command for any agent — swap --agent for codex, cursor, copilot.

Facts
Files in the skill folder: 1
SKILL.md size: 2 KB
Bundled scripts: none
Version: 1.0.0
Declared author: cosmicstack-labs
Path: categories/finance-legal/risk-management/SKILL.md
Open the folder on GitHub →
Where it comes from
Stars: 364
Language: JavaScript
Read our review of the source →

Weekly change comes from our own snapshots, not the repository page — it measures attention, not adoption.

From the SKILL.md

# Risk Management Identify, assess, and mitigate business and operational risks. ## Risk Assessment Framework ### Identification Categories | Category | Examples | |----------|----------| | Strategic | Competition, market shifts, M&A integration | | Operational | System failures, process gaps, human error | | Financial | Currency, credit, liquidity, fraud | | Compliance | Regulatory changes, data privacy, licensing | | Reputational | Social media, PR crises, customer satisfaction | | Security | Data breaches, cyber attacks, insider threats | ### Assessment Matrix ``` Likelihood × Impact = Risk Score (1-25) Impact Low Med High Likely 3 6 9 Possible 2 4 6 Rare 1 2 3 Score 1-3: Accept | 4-6: Mitigate | 7-9: Avoid/Transfer ``` ## Mitigation Strategies | Strategy | When | Example | |----------|------|---------| | Avoid | High risk, low reward | Don't enter unstable market | | Reduce | Manageable risk | Add security controls, backups | | Transfer | Financial risk but can't eliminate | Insurance, vendor contracts | | Accept | Low impact or expensive to fix | Minor process inefficiencies | ## Business Continuity Plan (BCP) ### Components 1. **Critical functions** — what must keep running?

What's inside
Steps it walks through
  1. Risk Assessment Framework
  2. Identification Categories
  3. Assessment Matrix
  4. Mitigation Strategies
  5. Business Continuity Plan (BCP)
  6. Components
  7. Testing
  8. Risk Register Template
More from mercury-agent-skills
All skills →
About this skill
What does the risk-management skill do?

Risk identification, assessment matrices, mitigation strategies, BCP, and risk reporting

How do I install it?

Run `npx skills add cosmicstack-labs/mercury-agent-skills --skill risk-management --agent claude-code` — it drops the skill into your project so the agent can pick it up. Swap the --agent value for codex, cursor or copilot if you use one of those.

Where does this skill come from?

From cosmicstack-labs/mercury-agent-skills, a repository with 364 stars. We read it straight from the repository tree rather than a submitted listing, so what you see here is what is actually published.

Is a popular skill a good skill?

Not necessarily. Stars measure attention, not adoption — a repository can trend for a week and be abandoned. That is why we show the weekly change from our own snapshots next to the total, instead of a single flattering number.

Keep going