Risk Management Agent Skill
Risk identification, assessment matrices, mitigation strategies, BCP, and risk reporting
Install
one command, takes just this skill from the repositorynpx skills add https://github.com/cosmicstack-labs/mercury-agent-skills --skill risk-managementThe instruction itself
9 sections, as written by the authorRisk Management
Identify, assess, and mitigate business and operational risks.
Risk Assessment Framework
Identification Categories
| Category | Examples |
|----------|----------|
| Strategic | Competition, market shifts, M&A integration |
| Operational | System failures, process gaps, human error |
| Financial | Currency, credit, liquidity, fraud |
| Compliance | Regulatory changes, data privacy, licensing |
| Reputational | Social media, PR crises, customer satisfaction |
| Security | Data breaches, cyber attacks, insider threats |
Assessment Matrix
Likelihood × Impact = Risk Score (1-25)
Impact
Low Med High
Likely 3 6 9
Possible 2 4 6
Rare 1 2 3
Score 1-3: Accept | 4-6: Mitigate | 7-9: Avoid/Transfer
Mitigation Strategies
| Strategy | When | Example |
|----------|------|---------|
| Avoid | High risk, low reward | Don't enter unstable market |
| Reduce | Manageable risk | Add security controls, backups |
| Transfer | Financial risk but can't eliminate | Insurance, vendor contracts |
| Accept | Low impact or expensive to fix | Minor process inefficiencies |
Business Continuity Plan (BCP)
Components
- Critical functions — what must keep running?
- RTO (Recovery Time Objective) — how fast to restore?
- RPO (Recovery Point Objective) — how much data loss tolerated?
- Alternate site — where to operate if primary is down?
- Communication plan — who notifies whom, how?
Testing
- Tabletop exercises: quarterly
- DR test: annually minimum
- Failover test: every 6 months
- Update BCP after each test or major change
Risk Register Template
| ID | Risk | Category | Likelihood | Impact | Score | Owner | Mitigation | Status |
|----|------|----------|-----------|--------|-------|-------|------------|--------|
| R01 | ... | ... | 3 | 4 | 12 | ... | ... | Active |
Other skills for the same job
different authors, same section of the catalogue
Integration with protocols.io API for managing scientific protocols. This skill should be used when working with protocols.io to search, create, update, or publish protocols; manage protocol steps and materials; handle discussions and comments; organize workspaces; upload and manage files; or integrate protocols.io functionality into workflows. Applicable for protocol discovery, collaborative protocol development, experiment tracking, lab protocol management, and scientific documentation.
Analyzes job descriptions and generates tailored resumes that highlight relevant experience, skills, and achievements to maximize interview chances
Generate Excalidraw diagrams from natural language descriptions. Use when asked to "create a diagram", "make a flowchart", "visualize a process", "draw a system architecture", "create a mind map", or "generate an Excalidraw file". Supports flowcharts, relationship diagrams, mind maps, and system architecture diagrams. Outputs .excalidraw JSON files that can be opened directly in Excalidraw.
Build and distribute Expo development clients locally or via TestFlight
Use when you have a written implementation plan to execute in a separate session with review checkpoints
Data structure for annotated matrices in single-cell analysis. Use when working with .h5ad files or integrating with the scverse ecosystem. This is the data format skill—for analysis workflows use scanpy; for probabilistic models use scvi-tools; for population-scale queries use cellxgene-census.
Benchling R&D platform integration. Access registry (DNA, proteins), inventory, ELN entries, workflows via API, build Benchling Apps, query Data Warehouse, for lab data management automation.
Comprehensive molecular biology toolkit. Use for sequence manipulation, file parsing (FASTA/GenBank/PDB), phylogenetics, and programmatic NCBI/PubMed access (Bio.Entrez). Best for batch processing, custom bioinformatics pipelines, BLAST automation. For quick lookups use gget; for multi-service integration use bioservices.
How to use it
Take cosmicstack-labs/risk-management from the repository into ~/.claude/skills for personal
use, or into .claude/skills inside a project.
The agent identifies a skill by the name field in its header. Two skills with the
same name cannot sit side by side — one of them will be ignored.