Risk Analysis

-21risk-automation helps agents automate 21risk workflows through Composio Rube MCP. It guides setup, connection checks, tool discovery with RUBE_SEARCH_TOOLS, and safer usage of current _21risk schemas.

risk-management-specialist helps AI agents draft ISO 14971:2019 medical device risk work products, including plans, hazard analyses, FMEA tables, risk controls, residual risk summaries, and post-production review inputs. Includes references, templates, and helper scripts for Regulatory Affairs and Quality workflows.

The information-security-manager-iso27001 skill helps AI agents perform ISO 27001:2022 ISMS work for HealthTech, MedTech, and regulated software teams. Use it for risk assessment, Annex A control mapping, compliance review, evidence checklists, incident response planning, and audit gap analysis with included references and scripts.

tech-stack-evaluator helps architects compare frameworks, databases, cloud providers, and migration options using weighted scoring, TCO analysis, ecosystem health, security checks, and validation workflows.

iso27001-audit-prep is a focused ISO 27001 ISMS audit readiness skill. It uses six forcing questions to pressure-test scope, risk register freshness, Annex A linkage, management review, corrective actions, and sample-ready evidence before internal, certification, or surveillance audits.

soc2-audit-prep is a SOC 2 Type II compliance review skill that runs six observation-period forcing questions via /cs:soc2-audit-prep <scope>. Use it to pressure-test scope, TSC choices, skipped control cycles, evidence gaps, incidents, and audit readiness before fieldwork.

compliance-readiness is a prompt-driven compliance review skill for pressure-testing framework scope, evidence reuse, audit timing, ownership, and readiness gaps before new-framework adoption or certification planning.

compliance-os is a multi-framework compliance orchestration skill for Compliance Review. Use it to assess framework applicability, map control overlap, prioritize reusable evidence, and simulate mock internal audits with JSON templates and Python helper scripts.

ai-act-readiness is a Compliance Review skill for EU AI Act intake, pre-deployment checks, conformity readiness, and annual refreshes. It uses /cs:ai-act-readiness <system> to walk through six article-linked questions on prohibited practices, high-risk status, roles, GPAI triggers, and phase-in dates.

aims-audit is a Claude skill for ISO/IEC 42001 AIMS compliance review, using /cs:aims-audit <scope> and six forcing questions to test scope, policy, risk refresh, and audit evidence before certification, internal audit, or AI-system onboarding.

ciso-advisor helps AI agents and security leaders turn risk, compliance, incidents, and board reporting into CISO-level decisions. Includes guidance for Security Strategy, SOC 2/ISO 27001/HIPAA/GDPR roadmaps, executive incident response, plus Python tools for risk quantification and compliance tracking.

stress-test is a Claude executive mentor skill for pressure-testing business assumptions before strategic planning, fundraising, GTM, hiring, or revenue bets. Use /em:stress-test <assumption> to isolate a measurable claim, challenge counter-evidence, and expose where a plan may break.

ciso-review is a CISO-style Security Audit prompt for plans involving customer data, compliance, vendors, trust boundaries, or production access. It uses six forcing questions—threat model, blast radius, detection, response, regulatory exposure, and ship/no-ship risk—to turn a plan into blockers, mitigations, and launch guidance.

pestle-analysis skill for assessing Political, Economic, Social, Technological, Legal, and Environmental factors around a market, product, or business decision. Use it for strategic planning, market entry checks, and external risk review when you need a structured, decision-ready analysis.

identify-assumptions-new helps Product Management teams stress-test a new product idea by surfacing risky assumptions across 8 categories, including Value, Usability, Viability, Feasibility, Ethics, Go-to-Market, Strategy & Objectives, and Team. Use it to map startup risks, clarify what must be true, and turn discovery gaps into tests.

identify-assumptions-existing helps you stress-test a feature idea in an existing product by surfacing risky assumptions across Value, Usability, Viability, and Feasibility. It uses PM, designer, and engineer perspectives plus a devil’s advocate lens for Strategic Planning and pre-build risk review.

Run a pre-mortem on a PRD, launch plan, or product proposal before shipping. This pre-mortem skill separates Tigers, Paper Tigers, and Elephants, then prioritizes launch-blocking, fast-follow, and track actions for clearer decision support.