New: 98,000+ skills indexed from GitHub repos with 100+ stars · every skill safety-checkedBrowse top skillsTop skills
Esc to closeBrowse all skills
Submit a skillBrowse skills
Submit a skillBrowse skills

Agent skill

Risk Manager

by majiayu000 in majiayu000/claude-skill-registry

Risk management specialist who assesses, analyzes, and mitigates financial and operational risks with expertise in quantitative risk modeling, compliance frameworks, and enterprise risk assessment

MITAuto-check passedLegal & Compliance

Install Risk Manager

skills CLI
$ npx skills add majiayu000/claude-skill-registry --skill risk-manager -a claude-code

Project install by default; add -g for ~/.claude/skills/.

GitHub CLI
$ gh skill install majiayu000/claude-skill-registry risk-manager --agent claude-code

Project scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).

Manual copy
$ git clone --depth 1 https://github.com/majiayu000/claude-skill-registry.git skills-src && mkdir -p .claude/skills && cp -r skills-src/skills/analysis/risk-manager-skill-404kidwiz-claude-supercode-ski-f7186f33 .claude/skills/risk-manager && rm -rf skills-src

Use ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.

Claude Code skills documentation · loads skills from .claude/skills/

Facts

Skill name
risk-manager
GitHub stars
666
Used in
1 other repo
Token cost
~2.7k tokens
SKILL.md length
1,067 words
Files
2
Skills in repo
1,273
Repo updated
First seen
Licence
MIT

At a glance

Risk management specialist who assesses, analyzes, and mitigates financial and operational risks with expertise in quantitative risk modeling, compliance frameworks, and enterprise risk assessment

  • Works in 5 steps: Built credit scoring model using… → Implemented probability of default (PD)… → Created loss given default (LGD) estimates → …
  • Tasks that involve Legal risk assessment
  • SKILL.md covers Purpose, When to Use, Examples and Best Practices, plus 10 more sections
  • Instructions only: no scripts, shell commands, URLs or credentials in SKILL.md

What it does

Risk Manager is an agent skill from majiayu000/claude-skill-registry. Risk management specialist who assesses, analyzes, and mitigates financial and operational risks with expertise in quantitative risk modeling, compliance frameworks, and enterprise risk assessment

Its SKILL.md is about 2.7k tokens, which your agent loads only when the skill is triggered. The skill folder holds 1 other file (for example `metadata.json`).

It sits in Legal & Compliance, covering Legal risk assessment, Threat modeling and SOC 2 and security compliance. The repository describes itself as: Searchable Claude Code skills catalog with source-linked guides and generated registry artifacts. The licence is MIT.

When your agent uses it

  • Tasks that involve Legal risk assessment
  • Tasks that involve Threat modeling
  • Tasks that involve SOC 2 and security compliance

Example prompts

  • “/risk-manager”

Requirements

  • Python 3

Workflow steps

5 steps, taken from the first numbered list in SKILL.md.

  1. Built credit scoring model using historical data
  2. Implemented probability of default (PD) calculations
  3. Created loss given default (LGD) estimates
  4. Developed exposure at default (EAD) models
  5. Calculated unexpected loss capital requirements

What it can do on your machine

Read from SKILL.md and the folder at commit 2d14a69. It shows what the files ask for, not the result of running them.

  • Tool permissions

    Pre-approves nothing: there is no allowed-tools line, so your agent's usual permission prompts apply.

    From allowed-tools in the SKILL.md frontmatter.

  • Runs code

    No scripts in the folder and no shell commands in SKILL.md.

    From the folder's file list and the shell code blocks in SKILL.md.

  • Network

    No URLs in SKILL.md.

    From URLs in SKILL.md, links to its own repository left out.

  • Credentials

    Names no API keys, tokens, secrets or passwords.

    From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.

Context cost

Risk Manager loads about 2.7k tokens when it runs. Until then it costs about 52 tokens; SKILL.md has 1,067 words of instructions outside code blocks.

Always · name and description, kept in context so the agent knows when to use it
~52
When it runs · the whole SKILL.md, loaded when a task matches
~2.7k

Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.

Safety

Auto-check passed

The automated check found no risky patterns in SKILL.md.

Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); files beside SKILL.md are not scanned.

SKILL.md

The full file from majiayu000/claude-skill-registry at commit 2d14a69, republished under its MIT licence (© majiayu000). 1,067 words, ~2,717 tokens.

Download SKILL.mdSave it as .claude/skills/risk-manager/SKILL.md (or your agent's skills folder). This skill also uses 1 other file; get the full folder from GitHub.
name
risk-manager
description
Risk management specialist who assesses, analyzes, and mitigates financial and operational risks with expertise in quantitative risk modeling, compliance frameworks, and enterprise risk assessment

Risk Manager

Purpose

Provides enterprise risk management expertise specializing in financial risk modeling, compliance frameworks, and quantitative risk analysis. Assesses, analyzes, and mitigates organizational risks through structured frameworks and governance.

When to Use

  • Conducting enterprise risk assessments
  • Implementing risk identification and classification systems
  • Creating risk scoring and prioritization matrices
  • Developing risk mitigation strategies
  • Performing quantitative risk modeling (VaR, Monte Carlo)
  • Establishing risk governance frameworks

Examples

Example 1: Financial Risk Assessment

Scenario: A bank needs to assess credit risk for a new lending product.

Implementation:

  1. Built credit scoring model using historical data
  2. Implemented probability of default (PD) calculations
  3. Created loss given default (LGD) estimates
  4. Developed exposure at default (EAD) models
  5. Calculated unexpected loss capital requirements

Results:

  • Accurate risk-based pricing implemented
  • Portfolio loss projections within 5% of actual
  • Regulatory capital optimized by 15%
  • Clear risk appetite limits established
Example 2: Operational Risk Framework

Scenario: A technology company needs to establish operational risk management.

Implementation:

  1. Identified operational risk categories (fraud, IT, compliance, etc.)
  2. Designed risk assessment methodology (Likelihood x Impact)
  3. Created risk register with 200+ identified risks
  4. Implemented key risk indicators (KRIs)
  5. Established risk escalation procedures

Results:

  • Comprehensive risk landscape mapped
  • 15 high-priority risks addressed proactively
  • Risk culture embedded in operations
  • Audit findings reduced by 40%
Example 3: Third-Party Risk Management

Scenario: Managing risk from 50+ vendors and suppliers.

Implementation:

  1. Developed vendor risk classification framework
  2. Created due diligence questionnaires
  3. Implemented continuous monitoring program
  4. Established contract requirements (security, privacy, SLAs)
  5. Built vendor risk dashboard for leadership

Results:

  • 100% vendor risk assessments completed
  • 8 high-risk vendors remediated
  • Vendor-related incidents reduced by 70%
  • Clear accountability established

Best Practices

Risk Identification
  • Comprehensive: Cover all risk categories and sources
  • Systematic: Use structured identification methods
  • Inclusive: Involve diverse stakeholders
  • Regular: Update continuously as environment changes
Risk Assessment
  • Quantitative: Use data where possible
  • Qualitative: Apply expert judgment appropriately
  • Prioritized: Focus on highest impact risks
  • Documented: Clear rationale for all assessments
Risk Mitigation
  • Cost-Effective: Balance mitigation cost with risk reduction
  • Practical: Implementable controls and procedures
  • Monitored: Track effectiveness over time
  • Escalated: Clear paths for risks requiring leadership input
Risk Governance
  • Clear Ownership: Assign accountability for each risk
  • Appetite Defined: Establish risk tolerance limits
  • Reporting: Regular updates to appropriate levels
  • Culture: Embed risk awareness throughout organization

Domain Expertise

  • Financial Risk: Market risk, credit risk, liquidity risk, operational risk
  • Risk Modeling: Monte Carlo simulation, stress testing, scenario analysis
  • Compliance Frameworks: SOX, Basel III, GDPR, industry regulations
  • Enterprise Risk Management: Risk identification, assessment, mitigation strategies
  • Quantitative Risk Analysis: VaR, CVaR, risk metrics, correlation analysis
  • Risk Governance: Risk appetite, risk tolerance, reporting structures

Core Capabilities

Risk Assessment Frameworks
  • Design comprehensive risk assessment methodologies
  • Implement risk identification and classification systems
  • Create risk scoring and prioritization matrices
  • Develop risk heat maps and visualization tools
  • Build risk register and tracking systems
Quantitative Risk Modeling
  • Calculate VaR and Expected Shortfall for portfolios
  • Perform stress testing and scenario analysis
  • Model credit risk and default probabilities
  • Analyze operational risk and loss distributions
  • Implement Monte Carlo simulations for risk estimation
Risk Mitigation Strategies
  • Design risk control frameworks and procedures
  • Implement hedging strategies for financial risks
  • Create business continuity and disaster recovery plans
  • Develop insurance and transfer strategies
  • Build early warning systems for emerging risks

Industry Best Practices

Risk Governance
  • Establish clear risk appetite and tolerance statements
  • Implement three lines of defense model
  • Create risk committees and escalation procedures
  • Develop risk culture and awareness programs
  • Ensure board-level risk oversight and reporting
Model Risk Management
  • Validate and backtest risk models regularly
  • Document model assumptions and limitations
  • Implement model inventory and lifecycle management
  • Conduct sensitivity analysis and stress testing
  • Establish model governance and approval processes

When to Use This Agent

Use for:

  • Building enterprise risk management systems
  • Developing quantitative risk models
  • Creating regulatory compliance frameworks
  • Implementing risk assessment and monitoring
  • Designing risk mitigation strategies

Ideal for:

  • Financial institutions and banks
  • Insurance companies
  • Large corporations with complex risk profiles
  • Regulatory compliance departments
  • Risk management consulting firms
Show full SKILL.md (412 more words)Show less

Example Interactions

"Enterprise risk management system"
User: Create an enterprise risk management framework for our company
Agent: I'll design a comprehensive ERM system:
- Risk identification workshops across all departments
- Risk scoring methodology with probability and impact matrices
- Risk heat map visualization and dashboard reporting
- Risk treatment plans with mitigation strategies
- Quarterly risk assessment cycles and governance procedures
"Market risk modeling"
User: Build a market risk measurement system for our trading portfolio
Agent: I'll implement:
- VaR calculation using historical and parametric methods
- Stress testing with historical crash scenarios
- Correlation analysis and concentration risk assessment
- Backtesting framework for model validation
- Real-time risk monitoring and exception reporting
"Operational risk management"
User: Develop an operational risk framework for our manufacturing company
Agent: I'll create:
- Risk identification process for operational processes
- Loss event data collection and analysis
- Key risk indicators (KRIs) and monitoring systems
- Business impact analysis and continuity planning
- Risk control self-assessment (RCSA) procedures

Tools and Technologies

  • Risk Platforms: SAS Risk Management, MSCI RiskMetrics, IBM OpenPages
  • Statistical Tools: R, Python (NumPy, Pandas), MATLAB
  • Databases: SQL Server, Oracle, PostgreSQL for risk data
  • Visualization: Tableau, Power BI, Qlik for risk dashboards
  • Compliance: Thomson Reuters Compliance, Wolters Kluwer OneSumX
  • Spreadsheet: Advanced Excel with risk modeling templates

Risk Categories and Metrics

  • Market Risk: VaR, stress VaR, scenario analysis, Greeks
  • Credit Risk: Probability of default, loss given default, exposure at default
  • Operational Risk: Loss event frequency/severity, key risk indicators
  • Liquidity Risk: Liquidity coverage ratio, net stable funding ratio
  • Compliance Risk: Regulatory findings, audit exceptions, penalties

Regulatory Frameworks

  • Banking: Basel III, Dodd-Frank, stress testing requirements (CCAR, DFAST)
  • Insurance: Solvency II, risk-based capital requirements
  • Corporate: SOX internal controls, enterprise governance
  • Data Privacy: GDPR data protection risk assessment
  • Industry-Specific: Healthcare (HIPAA), Energy (NERC CIP), etc.

Risk Assessment Methodologies

  • Qualitative: Expert interviews, workshops, brainstorming sessions
  • Quantitative: Statistical analysis, historical data, Monte Carlo simulation
  • Hybrid: Fuzzy logic, Bayesian networks, decision trees
  • Scenario Analysis: Best/worst case, historical scenarios, forward-looking
  • Benchmarking: Peer comparison, industry standards, best practices

Reporting and Communication

  • Executive Dashboards: Risk appetite monitoring, KPI tracking
  • Board Reports: Risk governance, emerging risks, audit findings
  • Regulatory Reporting: Risk-based capital, stress test results
  • Management Reports: Risk trends, mitigation effectiveness, incidents
  • Stakeholder Communication: Risk awareness, training, culture building

Performance Metrics

  • Risk-adjusted return on capital (RAROC)
  • Risk identification coverage and completeness
  • Model validation accuracy and predictive power
  • Incident reduction and mitigation effectiveness
  • Regulatory compliance scores and audit findings

Anti-Patterns

Risk Assessment Anti-Patterns
  • Risk Blindness: Not identifying all relevant risks - comprehensive risk identification
  • Subjective Scoring: Risk ratings without methodology - use quantitative methods
  • Static Risk View: Risk assessments never updated - regular risk reviews
  • Siloed Risk: Risks viewed in isolation - consider risk interdependencies
Risk Modeling Anti-Patterns
  • Model Over-Confidence: Blind trust in models - validate and stress test
  • Historical Bias: Assuming past patterns continue - consider tail risks
  • Correlation Ignorance: Ignoring risk correlations - model joint tail events
  • Parameter Staleness: Using outdated model parameters - regular model updates
Mitigation Anti-Patterns
  • Treat Everything: Over-investing in low-priority risks - prioritize mitigation efforts
  • Control Theater: Controls that exist but don't work - test control effectiveness
  • Mitigation Gap: Plans without execution - track mitigation to completion
  • Transfer Illusion: Insurance or transfer without understanding - verify coverage adequacy
Governance Anti-Patterns
  • Risk Appetite Vacuum: No defined risk appetite - establish clear thresholds
  • Escalation Absence: Risks not escalating appropriately - define escalation paths
  • Siloed Ownership: No clear risk ownership - assign accountability
  • Reporting Delay: Risks reported too late - real-time risk monitoring

© majiayu000, MIT. Rendered from Markdown: HTML in the file is shown as text, images as links, and headings moved down two levels. Raw file

Files

SKILL.md and 1 other file in skills/analysis/risk-manager-skill-404kidwiz-claude-supercode-ski-f7186f33 of majiayu000/claude-skill-registry.

  • SKILL.md
  • metadata.json

Open the folder on GitHubat commit 2d14a69

Used in 1 other repository

We found 1 copy of this SKILL.md (exact, near-identical or edited) in other folders, from 1 other GitHub owner. This page covers the copy in majiayu000/claude-skill-registry, which our catalogue first saw on October 7, 2026.

Compare with similar skills

Risk Manager next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.

Risk Manager compared with similar skills
SkillStarsUsed inTokensAuto-checkLicenceRepo updated
Risk Manager this skillmajiayu000/claude-skill-registry6661 repos~2.7kAutomated safety check: PassMIT
Security Compliancesangrokjung/claude-forge8502 repos~7.2kAutomated safety check: PassMIT
Iso27001Sushegaad/Claude-Skills-Governance-Risk-and-Compliance9421 repos~2.2kAutomated safety check: PassMIT
Conducting Cyber Risk Assessment With Nist 800 30mukul975/Anthropic-Cybersecurity-Skills34k—~2.5kAutomated safety check: PassApache-2.0
Architecting Securitytelagod/code-abyss243—~712Automated safety check: PassMIT
Product Launch Legal Reviewanthropics/claude-for-legal9.6k2 repos~5kAutomated safety check: PassApache-2.0

Similar skills

  • Security Compliance

    sangrokjung/claude-forge

    Guides security professionals in implementing defense-in-depth security architectures, achieving compliance with industry frameworks (SOC2, ISO27001, GDPR, HIPAA), conducting threat modeling and…

    850 GitHub starsUsed in 2 repos~7.2k tokens
    Legal & ComplianceAuto-check passed

  • Iso27001

    Sushegaad/Claude-Skills-Governance-Risk-and-Compliance

    Expert ISO 27001 compliance assistant for security and compliance teams.

    942 GitHub starsUsed in 1 repo~2.2k tokens
    Legal & ComplianceAuto-check passed

  • Conducting Cyber Risk Assessment With Nist 800 30

    mukul975/Anthropic-Cybersecurity-Skills

    Conduct a defensible cybersecurity risk assessment using the NIST SP 800-30 Rev 1 methodology: prepare scope and a risk model, identify threat sources and threat events, identify vulnerabilities and…

    34k GitHub stars~2.5k tokensUpdated 1 mo ago
    Legal & ComplianceAuto-check passed

  • Architecting Security

    telagod/code-abyss

    安全架构与治理：威胁建模 (STRIDE/PASTA/LINDDUN)、零信任身份架构、IAM/SSO/MFA/PAM、合规框架 (SOC2/PCI/HIPAA/GDPR)、DLP、隐私工程、安全控制设计。Use when designing security architecture, threat modeling new systems, implementing zero-trust…

    243 GitHub stars~712 tokensUpdated 2 mo ago
    SecurityAuto-check passed

  • Product Launch Legal Review

    anthropics/claude-for-legal

    Official

    Runs a category-by-category legal review of a product launch from a PRD or tracker ticket, calibrated to your team's framework, and writes a review memo in house format.

    9.6k GitHub starsUsed in 2 repos~5k tokens
    Legal & ComplianceAuto-check passed

  • Legal Risk Visualization

    zh-xx/legal-assistant-skills

    法律风险结构化分析与可视化。基于法律分析文本，执行五步风险抽取模型， 生成四层可视化输出（雷达图数据、风险矩阵、影响路径图、决策树）。

    173 GitHub stars~2.4k tokensUpdated 5 mo ago
    Legal & ComplianceAuto-check passed

More from majiayu000/claude-skill-registry

All 1,273 skills in this repo

  • Deep Research

    majiayu000/claude-skill-registry

    Multi-source deep research using firecrawl and exa MCPs. An agent skill from majiayu000/claude-skill-registry.

    666 GitHub starsUsed in 6 repos~1.1k tokens
    Auto-check passed

  • Exa Search

    majiayu000/claude-skill-registry

    Neural search via Exa MCP for web, code, and company research.

    666 GitHub starsUsed in 5 repos~856 tokens
    Auto-check passed

  • Fal AI Media

    majiayu000/claude-skill-registry

    Unified media generation via fal.ai MCP — image, video, and audio.

    666 GitHub starsUsed in 5 repos~1.7k tokens
    Auto-check passed

  • Pyzotero

    majiayu000/claude-skill-registry

    Interact with Zotero reference management libraries using the pyzotero Python client.

    666 GitHub starsUsed in 5 repos~1.6k tokens
    Auto-check: notes

  • Bgpt Paper Search

    majiayu000/claude-skill-registry

    Search scientific papers and retrieve structured experimental data extracted from full-text studies via the BGPT MCP server.

    666 GitHub starsUsed in 4 repos~619 tokens
    Auto-check: notes

  • Bio Alignment Pairwise

    majiayu000/claude-skill-registry

    Perform pairwise sequence alignment using Biopython Bio.Align.PairwiseAligner.

    666 GitHub starsUsed in 4 repos~1.7k tokens
    Auto-check passed

Categories

Questions about Risk Manager

What does Risk Manager do?

Risk management specialist who assesses, analyzes, and mitigates financial and operational risks with expertise in quantitative risk modeling, compliance frameworks, and enterprise risk assessment. Risk Manager is an agent skill from majiayu000/claude-skill-registry.

When should I use Risk Manager?

Risk Manager fits situations like: tasks that involve Legal risk assessment; tasks that involve Threat modeling; tasks that involve SOC 2 and security compliance.

How do I install Risk Manager in Claude Code?

Run `npx skills add majiayu000/claude-skill-registry --skill risk-manager -a claude-code`. Or copy the skill folder (skills/analysis/risk-manager-skill-404kidwiz-claude-supercode-ski-f7186f33 in majiayu000/claude-skill-registry) into .claude/skills/risk-manager in your project. Claude Code loads it when a task matches its description.

How do I install Risk Manager in Codex?

Run `npx skills add majiayu000/claude-skill-registry --skill risk-manager -a codex`. Or copy the skill folder (skills/analysis/risk-manager-skill-404kidwiz-claude-supercode-ski-f7186f33 in majiayu000/claude-skill-registry) into .agents/skills/risk-manager in your project. Codex loads it when a task matches its description.

Can I use Risk Manager in Cursor, Gemini CLI or GitHub Copilot?

Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add majiayu000/claude-skill-registry --skill risk-manager -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/risk-manager, .gemini/skills/risk-manager, .github/skills/risk-manager and .opencode/skills/risk-manager in your project.

What does Risk Manager need to run?

SKILL.md names no scripts, command-line tools or credentials: Risk Manager is instructions for the agent only. Our summary lists: Python 3.

Does Risk Manager access the network?

SKILL.md contains no URLs. Any network use would come from the scripts or tools the agent runs. This is read from the text; nothing was executed.

Is Risk Manager safe to install?

Our automated static check of SKILL.md found no risky patterns, such as piping downloads into a shell, reading credential files or hidden Unicode. It is not a guarantee. Review the folder before installing.

What licence does Risk Manager use?

Risk Manager is published under the MIT licence (the repository's licence). It allows redistribution, so the full SKILL.md is shown on this page.

How many tokens does Risk Manager use?

About 2.7k tokens (SKILL.md is roughly 11k characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full.

What are the alternatives to Risk Manager?

Skills that share tags, products or a category with Risk Manager: Security Compliance (sangrokjung/claude-forge, 850 stars), Iso27001 (Sushegaad/Claude-Skills-Governance-Risk-and-Compliance, 942 stars), Conducting Cyber Risk Assessment With Nist 800 30 (mukul975/Anthropic-Cybersecurity-Skills, 34k stars) and Architecting Security (telagod/code-abyss, 243 stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.

Who maintains Risk Manager?

majiayu000 (a GitHub user) maintains it in majiayu000/claude-skill-registry, which has 666 GitHub stars. The repository holds 1,273 skills in this directory. The repository was last updated on October 7, 2026.

Source: majiayu000/claude-skill-registry on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.