How does the Risk Cycle skill identify new risks?

The skill analyzes recent changes, technical decisions, and external factors against predefined categories such as architecture, security, schedule, and vendor stability.

Where is the risk data stored?

All risk data, including the register and reports, is stored in human-readable Markdown files within the .aiwg/risks/ directory for easy version control and review.

What kind of risk categories are supported?

It categorizes risks into Technical (architecture, security), Project (schedule, resources), and External (market, compliance) domains.

Can I automate the escalation of critical risks?

Yes, the skill includes configurable escalation rules that trigger notifications to project managers or sponsors when risks hit critical scores or mitigation tasks become overdue.

SDLC Risk Cycle Management

Name: SDLC Risk Cycle Management
Author: jmagly

byjmagly

•

Collaboration Tools

Automates continuous risk identification, assessment, and mitigation tracking throughout the software development lifecycle.

About

The Risk Cycle skill provides an autonomous framework for proactive risk management within Claude Code. It identifies technical, project, and external risks by analyzing recent activities and technical decisions, then scores them using a standardized probability-impact matrix. By maintaining a dynamic risk register, the skill ensures that mitigations are tracked to completion, critical issues are escalated according to predefined rules, and stakeholders receive consistent status reports. This is essential for maintaining project health in high-velocity, agentic coding environments where manual oversight is limited.

Key Features

Standardized 5x5 risk assessment matrix for probability and impact scoring
Automated risk identification from code changes and architectural decisions
Multi-level escalation rules for overdue tasks and critical-severity risks
Dynamic risk register management with automated mitigation tracking
67 GitHub stars
Automated risk reporting including trend analysis and dashboards

Use Cases

Maintaining a continuous security and compliance audit trail until risks are fully retired
Managing project resource dependencies and schedule risks in complex software deliveries
Identifying and tracking technical debt and architectural bottlenecks during rapid scaling

About

Key Features

Standardized 5x5 risk assessment matrix for probability and impact scoring
Automated risk identification from code changes and architectural decisions
Multi-level escalation rules for overdue tasks and critical-severity risks
Dynamic risk register management with automated mitigation tracking
67 GitHub stars
Automated risk reporting including trend analysis and dashboards

Use Cases

Maintaining a continuous security and compliance audit trail until risks are fully retired
Managing project resource dependencies and schedule risks in complex software deliveries
Identifying and tracking technical debt and architectural bottlenecks during rapid scaling