/risk-register-manager
Manages organizational risk registers. Performs risk assessments, calculates risk scores, tracks mitigations, and generates risk reports for leadership.
$ npx -y skills add GRCEngClub/claude-grc-engineering --skill risk-register-manager --agent claude-codeHow it fires
How this skill gets triggered: by you, by Claude, or both.
- Fires itselfAuto-invocation. Claude auto-loads it when your prompt matches the work.
- You can call itInvoke it directly when you want it.
- Slash command
/risk-register-manager
Context preview
The summary Claude sees to decide when to auto-load this skill.
Manages organizational risk registers. Performs risk assessments, calculates risk scores, tracks mitigations, and generates risk reports for leadership.
SKILL.md
risk-register-manager.SKILL.mdname: risk-register-manager
description: Manages organizational risk registers. Performs risk assessments, calculates risk scores, tracks mitigations, and generates risk reports for leadership.
allowed-tools: Read, Write, Glob
Risk Register Manager
Maintains and analyzes organizational risk registers.
The register is user-owned state. Write one file per risk under `./grc-data/risks/`, keep it reviewable in Git, and use `schemas/risk.schema.json` as the contract for JSON or JSON-equivalent YAML.
Capabilities
- **Risk Identification**: Identify and categorize risks
- **Risk Scoring**: Calculate inherent and residual risk scores
- **Mitigation Tracking**: Monitor remediation progress
- **Risk Reporting**: Generate board-level risk reports
Risk Assessment Framework
Likelihood Scale (1-5)
1. Rare - May occur only in exceptional circumstances 2. Unlikely - Could occur at some time 3. Possible - Might occur at some time 4. Likely - Will probably occur in most circumstances 5. Almost Certain - Expected to occur in most circumstances
Impact Scale (1-5)
1. Insignificant - No real impact 2. Minor - Some impact, easily remediated 3. Moderate - Significant impact requiring response 4. Major - Major impact on operations 5. Catastrophic - Business-threatening impact
Risk Categories
- Strategic, Operational, Financial, Compliance
- Technology, Security, Privacy, Third-Party
- Reputational, Legal, Regulatory
Output Formats
- Risk register spreadsheet format
- Risk heat maps
- Top 10 risks report
- Risk trend analysis
Read more
name: risk-register-manager description: Manages organizational risk registers. Performs risk assessments, calculates risk scores, tracks mitigations, and generates risk reports for leadership. allowed-tools: Read, Write, Glob
Risk Register Manager
Maintains and analyzes organizational risk registers.
The register is user-owned state. Write one file per risk under `./grc-data/risks/`, keep it reviewable in Git, and use `schemas/risk.schema.json` as the contract for JSON or JSON-equivalent YAML.
Capabilities
- **Risk Identification**: Identify and categorize risks
- **Risk Scoring**: Calculate inherent and residual risk scores
- **Mitigation Tracking**: Monitor remediation progress
- **Risk Reporting**: Generate board-level risk reports
Risk Assessment Framework
Likelihood Scale (1-5)
1. Rare - May occur only in exceptional circumstances 2. Unlikely - Could occur at some time 3. Possible - Might occur at some time 4. Likely - Will probably occur in most circumstances 5. Almost Certain - Expected to occur in most circumstances
Impact Scale (1-5)
1. Insignificant - No real impact 2. Minor - Some impact, easily remediated 3. Moderate - Significant impact requiring response 4. Major - Major impact on operations 5. Catastrophic - Business-threatening impact
Risk Categories
- Strategic, Operational, Financial, Compliance
- Technology, Security, Privacy, Third-Party
- Reputational, Legal, Regulatory
Output Formats
- Risk register spreadsheet format
- Risk heat maps
- Top 10 risks report
- Risk trend analysis
Open-source GRC Engineering resource for Claude. claude-grc-engineering turns technical evidence from cloud, SaaS, code, and security tools into framework-aligned findings, gap reports, remediation guidance, evidence packages, and OSCAL workflows.
Repo: GRCEngClub/claude-grc-engineering
Other skills on trust-center.
- /academic-research-companion
Guide a research project through the full academic lifecycle — from raw idea to concrete research question, literature grounding, methodology, writing, feedback, and publication. Use this skill whenever the user shares a research idea, asks to "flesh out" a topic, wants sources
Open skill - /aws-inspector-expert
Expertise in evaluating AWS accounts for compliance — what checks are meaningful, which SCF controls they map to, and how to interpret aws CLI output.
Open skill - /azure-inspector-expert
Expertise in evaluating Azure subscription findings from azure-inspector and mapping them to SCF controls.
Open skill - /crowdstrike-inspector-expert
Interpret CrowdStrike Falcon findings for sensor coverage, policy visibility, and host group scoping.
Open skill - /datadog-inspector-expert
Interpret datadog-inspector findings and translate Datadog monitoring, audit, log-retention, SSO, and RBAC results into GRC evidence and remediation.
Open skill - /drata-inspector-expert
Interpret drata-inspector findings generated from drata-cli workflows and turn Drata control, monitor, evidence, personnel, and integration posture into GRC action.
Open skill