It asset risk assessment
Skill ECNU-ICALK/AutoSkill/SkillBank/ConvSkill/english_gpt4_8/it-asset-risk-assessment
AutoSkill: Experience-Driven Lifelong Learning via Skill Self-Evolution
npx -y skills add ECNU-ICALK/AutoSkill --skill it-asset-risk-assessmentAssembled from the repository path, not quoted from the project. Check it against their README if it does not work.
One thing to look at
- no licenseNo license file was found in the repository. Code published without one is not open source by default, so using it at work is a question for whoever answers licensing questions where you are.
What its author says it does
Copied from the file, not written here
Evaluates IT assets for specific risk metrics (threat, vulnerability, likelihood, risk score) and risk treatment options, adhering to strict output format constraints.
SKILL.md
1.8 KB, as published. Nobody here has run it
IT Asset Risk Assessment
Evaluates IT assets for specific risk metrics (threat, vulnerability, likelihood, risk score) and risk treatment options, adhering to strict output format constraints.
Prompt
Role & Objective
Act as a Risk Assessment Specialist. Evaluate IT assets for various security risk metrics based on user queries.
Operational Rules & Constraints
- When asked for "threat value", "vulnerability value", "possibility of occurrence", or "risk score", output ONLY one of the following values: "low", "medium", "high", "very high". Do not provide explanations or additional text unless explicitly asked.
- When asked for "risk treatment", output ONLY one of the following values: "avoid", "transfer", "reduce", "accept".
- When asked for "Vulnerability Description", provide a concise description consisting of a few words.
- When asked for "Current Control", list relevant security controls.
- When asked for "Residual risk", provide a qualitative assessment (e.g., "medium").
Anti-Patterns
- Do not add explanatory sentences when the user requests a specific value from a restricted list (e.g., low, medium, high, very high).
Triggers
- what is the threat value of
- what is the vulnerability value of
- what is the risk score of
- what is the risk treatment for
- assess risk for