wr-risk-scorer

Plugin wr-risk-scorer from marketplace windyroad in windyroad/agent-plugins. Commands read from the repo's manifest — today.

Skills (10)

• wr-risk-scorer:assess-external-comms

  On-demand external-comms risk review. Reviews a draft of an outbound prose tool call (gh issue/pr body, security advisory, npm publish content, or .changeset/*.md body) for confidential-information leaks per RISK-POLICY.md. Delegates to wr-risk-scorer:external-comms and pre-satisfies the external-co

• wr-risk-scorer:assess-inbound-report

  On-demand inbound-report risk review. Reviews a third-party submission against this repo's intake (problem-report issue body, Q&A discussion, security-advisory body) for Request-risk (info-extraction / backdoor request / malicious-code injection) and Fix-risk (privilege escalation / removal of load-

• wr-risk-scorer:assess-release

  On-demand release risk assessment. Scores commit, push, and release risk for the current unpushed changes. Delegates to wr-risk-scorer:pipeline and satisfies the commit gate for the current session.

• wr-risk-scorer:assess-wip

  On-demand WIP risk nudge. Scores the current uncommitted diff for pipeline risk. Use during development to catch high-risk changes before committing.

• wr-risk-scorer:bootstrap-catalog

  Bootstrap docs/risks/ standing-risk catalog from existing .risk-reports/ corpus. Walks reports, dedupes by ADR-056 slug, emits one R<NNN>-<slug>.active.md per unique slug with ## Source Evidence block citing originating reports. Idempotent — re-runs are no-ops by file-existence per slug. One-shot pe

• wr-risk-scorer:create-risk

  Create a new standing-risk entry in docs/risks/. Examines existing risks, gathers impact/likelihood/controls from the user, writes a file using the entry shape inlined in this skill (no TEMPLATE.md dependency — the entry shape is owned by this skill per user direction 2026-05-04), and updates the re

• wr-risk-scorer:external-comms

  Invokable SKILL wrapper around the wr-risk-scorer:external-comms leak-review agent. Delegates to the agent via the Agent tool and returns the agent's structured EXTERNAL_COMMS_RISK_VERDICT. Internal-use plumbing used by `/wr-risk-scorer:assess-external-comms` per ADR-015's Confirmation literal phras

• wr-risk-scorer:pipeline

  Invokable SKILL wrapper around the wr-risk-scorer:pipeline scoring agent. Delegates to the agent via the Agent tool and returns the agent's structured RISK_SCORES output. Internal-use plumbing used by `/wr-risk-scorer:assess-release` and any other consumer SKILL that needs Skill-tool-shaped invocati

• wr-risk-scorer:update-policy

  Create or update the project's RISK-POLICY.md per ISO 31000 and the risk-scorer agent. Examines the project to derive business-specific impact levels.

• wr-risk-scorer:wip

  Invokable SKILL wrapper around the wr-risk-scorer:wip nudge agent. Delegates to the agent via the Agent tool and returns the agent's structured WIP risk verdict. Internal-use plumbing used by `/wr-risk-scorer:assess-wip` per ADR-015's Confirmation literal phrasing. End users should invoke `/wr-risk-

Subagents (7)

• agent

  Risk scoring routing doc. Use mode-specific agents instead.

• external-comms

  Reviews drafts of external-facing prose (gh issues / PRs / advisories, npm publish content, .changeset/*.md bodies) on two composing axes per RISK-POLICY.md — confidential-information leaks AND outbound credibility / self-own errors (asking for already-held info, restating prior as new, careless mis

• inbound-report

  Reviews third-party prose submitted as inbound reports (gh issue bodies labelled problem-report, gh discussions in Q&A categories, gh security-advisory bodies) for two risk axes — Request-risk (info-extraction / backdoor request / malicious-code injection) and Fix-risk (privilege escalation / remova

• pipeline

  Scores pipeline actions (commit, push, release) for cumulative residual risk per RISK-POLICY.md.

• plan

  Reviews implementation plans for risk, including projected release risk.

• policy

  Validates RISK-POLICY.md drafts for ISO 31000 compliance.

• wip

  Assesses cumulative pipeline risk after each edit, providing guidance and recommendations.

Hooks (6)

• SessionStart

  ${CLAUDE_PLUGIN_ROOT}/hooks/risk-scorer-dispatch.sh session-start

• UserPromptSubmit

  ${CLAUDE_PLUGIN_ROOT}/hooks/risk-scorer-dispatch.sh user-prompt

• PreToolUse

  ${CLAUDE_PLUGIN_ROOT}/hooks/risk-scorer-dispatch.sh pre-tool

• PostToolUse

  ${CLAUDE_PLUGIN_ROOT}/hooks/risk-scorer-dispatch.sh post-tool

• SubagentStart

  ${CLAUDE_PLUGIN_ROOT}/hooks/risk-scorer-dispatch.sh subagent-start

• SubagentStop

  ${CLAUDE_PLUGIN_ROOT}/hooks/risk-scorer-dispatch.sh subagent-stop

Similar plugins