ai-risk

What problem does it solve?

This Skill streamlines the process of managing security and compliance risks by providing a unified procedure for accepting, resolving, and renewing risk acceptances, ensuring all risks are tracked and auditable.

Core Features & Use Cases

• Risk Acceptance: Record new risks with severity, expiry, and remediation plans when immediate fixes aren't possible.
• Risk Resolution: Close accepted risks once remediation is complete and validated.
• Risk Renewal: Extend the expiry of accepted risks up to two times if remediation is still in progress.
• Use Case: A security scan flags a vulnerability that cannot be fixed immediately due to its complexity. This Skill allows the team to formally accept the risk, document the remediation plan, and set an expiry date, ensuring it's not forgotten.

Quick Start

Use the ai-risk skill to accept a new risk with critical severity and a follow-up action to update the authentication module.