geographic-clustering

756

dadbodgeoff

Grid-based geographic clustering with O(n) performance, medoid finding for map markers, and multi-factor risk scoring from event density, sentiment, and recency.

vendor-security-questionnaire

376

a5c-ai

Automated vendor security assessment through questionnaire generation, response parsing, and risk scoring

risk-register-builder

376

a5c-ai

Build and maintain project and change risk registers with scoring, mitigation strategies, and tracking

vendor-risk-scorer

376

a5c-ai

Comprehensive supplier risk scoring skill with multi-dimensional risk assessment

risk-scoring-framework

96

gtmagents

Method for calculating customer health/risk tiers using quantitative + qualitative data.

deal-review-framework

43

OneWave-AI

Structured deal assessment using MEDDIC, BANT. Risk scoring, required evidence by stage, red flag detection, coaching points.

project-risk-register

31

lyndonkl

Use when managing project uncertainty through structured risk tracking, identifying and assessing risks with probability×impact scoring (risk matrix), assigning risk owners and mitigation plans, tracking contingencies and triggers, monitoring risk evolution over the project lifecycle, or when the user mentions risk register, risk assessment, risk management, risk mitigation, probability-impact matrix, or asks "what could go wrong with this project?".

vulnerability-management

31

melodic-software

Vulnerability lifecycle management including CVE tracking, CVSS scoring, risk prioritization, remediation workflows, and coordinated disclosure practices

prioritization-methods

31

melodic-software

Techniques for prioritizing requirements including MoSCoW, the Kano Model, WSJF (SAFe), and Wiegers' value/cost/risk matrix. Provides scoring frameworks, trade-off analysis, and priority visualizations. Use when ranking requirements by business value, customer impact, or implementation efficiency.

contract analysis

29

omer-metin

Use when reviewing contracts, extracting key terms, identifying risks, or building contract-analysis tools — covers NLP approaches, clause identification, and risk scoring. Use when "contracts" are mentioned.

dd-risk-scoring

19

Abilityai

Calculate weighted risk scores from specialist agent reports. Use when synthesizing multiple due diligence reports into an overall investment risk assessment.

vulnerability-assessor

19

matteocervelli

Assess identified vulnerabilities for exploitability, impact, and risk. Provide CVSS scoring and remediation strategies. Use when analyzing security findings.

threat-modeling

15

bobmatnyc

Threat modeling workflow for software systems: scope, data flow diagrams, STRIDE analysis, risk scoring, and turning mitigations into backlog and tests

mcp-evaluator

13

JeredBlu

Comprehensive security and privacy evaluation system for MCP (Model Context Protocol) servers. Use when users provide GitHub URLs to MCP servers and request security assessment, privacy evaluation, or ask "is this MCP safe to use." Evaluates security vulnerabilities, privacy risks, code quality, community feedback, and provides actionable recommendations with risk scoring.

agent-skill-evaluator

13

JeredBlu

Comprehensive security and safety evaluation system for agent skills (.skill files). Use when users provide GitHub URLs, website links, or .skill files for download and request security assessment, safety evaluation, or ask "is this skill safe to use." Evaluates prompt injection risks, malicious code patterns, hidden instructions, data exfiltration attempts, and provides actionable recommendations with risk scoring.

transit-station-site-acquisition-strategy

9

reggiechan74

Expert in site selection and property assembly for transit stations including TOD potential scoring, multi-modal connection assessment, property acquisition complexity analysis, and strategic sequencing. Use when planning complex transit station acquisitions, evaluating site alternatives, assessing holdout risk, or optimizing acquisition timelines. Key terms include transit-oriented development, site selection, property assembly, holdout risk, TOD scoring, joint development, community impact assessment

tenant-credit-analyst

9

reggiechan74

Expert in tenant creditworthiness assessment and financial statement analysis. Use when evaluating tenant credit quality, analyzing financial ratios, assessing default risk, or structuring security requirements. Key terms include DSCR, current ratio, debt-to-equity, working capital, liquidity analysis, credit scoring, personal guarantee, security deposit, financial covenants

pentest-report-generator

3

0x-Professor

Aggregate findings and generate multi-format pentest reports with remediation roadmap and risk scoring.

implementing-epss-score-for-vulnerability-prioritization

2

mukul975

Integrate FIRST's Exploit Prediction Scoring System (EPSS) API to prioritize vulnerability remediation based on real-world exploitation probability within 30 days.

performing-ot-vulnerability-assessment-with-claroty

2

mukul975

This skill covers performing vulnerability assessments in OT environments using the Claroty xDome platform for comprehensive asset discovery, risk scoring, vulnerability correlation, and remediation prioritization. It addresses passive vulnerability identification through traffic analysis, active safe querying of OT devices, integration with CVE databases and ICS-CERT advisories, and risk-based prioritization that accounts for operational impact and compensating controls.

performing-endpoint-vulnerability-remediation

2

mukul975

Performs vulnerability remediation on endpoints by prioritizing CVEs based on risk scoring, deploying patches, applying configuration changes, and validating fixes. Use when remediating findings from vulnerability scans, responding to critical CVE advisories, or maintaining endpoint compliance with patch management SLAs. Activates for requests involving vulnerability remediation, CVE patching, endpoint vulnerability management, or security fix deployment.

implementing-api-security-posture-management

2

mukul975

Implement API Security Posture Management to continuously discover, classify, and score APIs based on risk while enforcing security policies across the API lifecycle.

None

2

mukul975

The Common Vulnerability Scoring System (CVSS) is the industry standard framework maintained by FIRST (Forum of Incident Response and Security Teams) for assessing vulnerability severity. CVSS v4.0 (r

performing-asset-criticality-scoring-for-vulns

2

mukul975

Develop and apply a multi-factor asset criticality scoring model to weight vulnerability prioritization based on business impact, data sensitivity, and operational importance.

research-skill

1

dtsong

Use this skill when conducting structured technology research — "research these vendors," "do a landscape scan," "compare these technologies," or gathering evidence for consulting engagements. Performs source-orchestrated research with landscape scans, candidate profiling, evidence gathering, and comparative analysis producing findings for downstream assessment. Do NOT use for risk scoring (assessment-skill), engagement scoping (intake-skill), or client deliverables (deliverable-skill).

prot-msa

1

hg125chinese-sketch

Multiple sequence alignment, conservation analysis, and position-specific mutation risk scoring. Uses mmseqs2/hhblits for real MSA when available, with ESM-2 pseudo-conservation as zero-dependency fallback. Provides family-calibrated conservation scores, consensus sequences, coevolution signals, and low-risk mutation suggestions. Triggers whenever you need to assess how conserved a position is, build a consensus sequence, identify coevolving positions, or calibrate ESM-2 LLR with family context.

misttrack-skills

1

slowmist

Use the MistTrack OpenAPI for cryptocurrency address risk analysis, AML compliance checks, and transaction tracing. MistTrack is an anti-money‑laundering tracking tool developed by SlowMist, supporting risk scoring, tag lookup, and transaction investigation for major on-chain addresses and transactions (BTC, ETH, TRX, BNB, etc.).

jsp-to-react-migration

manojsingh

Assess a Java JSP/TagLib app on Tomcat and produce a migration plan to React + Spring Boot APIs. Emphasize evidence-based scoring, strategy selection, roadmap, effort, and risks.

senior-pm

robertbstillwell

Senior Project Manager for enterprise software, SaaS, and digital transformation projects. Specializes in portfolio management, quantitative risk analysis, resource optimization, stakeholder alignment, and executive reporting. Uses advanced methodologies including EMV analysis, Monte Carlo simulation, WSJF prioritization, and multi-dimensional health scoring.

Investment Portfolio Analyzer

Eli-yu-first

Analyzes investment portfolios with risk assessment, diversification scoring, and rebalancing suggestions

customer-success-manager

robertbstillwell

Monitors customer health, predicts churn risk, and identifies expansion opportunities using weighted scoring models for SaaS customer success

Risk Assessment Matrix

Eli-yu-first

Creates risk assessment matrices with probability, impact scoring, and mitigation strategy planning

enterprise-risk-assessment

Kaakati

Enterprise risk assessment with risk register, heat map, mitigation planning, and KRI framework. USE THIS SKILL when the user asks about risk identification, risk register, risk heat map, ERM framework, enterprise risk management, risk appetite, risk tolerance, key risk indicators, risk scoring, risk universe, control effectiveness, residual risk, inherent risk, or "what are our biggest risks." Also trigger when asked to build a risk matrix, assess control effectiveness, design a KRI dashboard, evaluate ERM maturity, or develop a risk mitigation plan for any organization or business unit.

Base Trading Skill

Bravo1058AI

Full OpenClaw trading skill for the Base blockchain. Execute swaps on Aerodrome and Uniswap V3, manage portfolio, run token safety checks (55-point scoring), monitor prices, manage liquidity positions, and track P&L. Kill switch, risk controls, flash loan arb via Aave V3.