Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
git clone --depth 1 https://github.com/abinauv/business-consultingWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/commands/abinauv/business-consulting/risk-assessment)<a href="https://agentmods.dev/commands/abinauv/business-consulting/risk-assessment"><img src="https://agentmods.dev/badge/commands/abinauv/business-consulting/risk-assessment/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/commands/abinauv/business-consulting/risk-assessment"><img src="https://agentmods.dev/badge/commands/abinauv/business-consulting/risk-assessment.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00010 | $0.00574 |
| Opus 5 | $0.00005 | $0.00287 |
| Sonnet 5 | $0.00002 | $0.00115 |
| Haiku 4.5 | $0.00001 | $0.00057 |
Grade A, and why
risk-assessment scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 11d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 47 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Risk Assessment
Use the business-consulting:risk-management skill to conduct a comprehensive risk assessment.
Analysis Steps
-
Risk Identification — Identify risks across all categories: strategic, operational, financial, compliance, reputational, technology, and external/geopolitical. For each, document the risk event, potential causes, and potential consequences.
-
Risk Quantification — Score each risk on probability (1–5) and impact (1–5). Calculate inherent risk scores. Present as a risk register:
ID Category Risk Description Probability Impact Risk Score Owner -
Risk Heat Map — Plot risks on a 5×5 probability × impact matrix. Classify zones as:
- Critical (Red): Score 15–25 — Immediate action required
- High (Orange): Score 10–14 — Active mitigation needed
- Medium (Yellow): Score 5–9 — Monitor and plan
- Low (Green): Score 1–4 — Accept and monitor
-
Risk Appetite Definition — Define risk appetite by category (what level of risk is acceptable). Establish tolerance thresholds that trigger escalation.
-
Mitigation Strategies — For each critical and high risk, design a mitigation strategy using the 4T framework:
Risk Strategy Actions Cost Residual Risk Owner Timeline - Treat: Reduce probability or impact through controls
- Transfer: Shift risk to third party (insurance, outsourcing, hedging)
- Tolerate: Accept the risk with monitoring
- Terminate: Exit the activity that creates the risk
-
Key Risk Indicators (KRIs) — Design early warning indicators for top risks. Include thresholds (green/amber/red), data sources, and monitoring frequency.
-
Risk Monitoring Dashboard — Design a reporting framework with board-level summary, management detail, and operational metrics.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 11d ago First seen · 47 lines · 10 tokens per session scan A 69c0c6fdefee
risk-assessment is a command published in the GitHub repository abinauv/business-consulting (28 stars, last pushed 6mo ago), licensed MIT. It adds 10 tokens to every session and 574 once invoked, about $0.0001 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other commands, from other repositories
diagnose-underperformer
Diagnose why a specific Google Ads or Meta Ads campaign / ad set / ad is underperforming and prescribe the next concrete action. Use when the user says something like "why is X not converting?", "this campaign is wasting money", or "why are impressions so low?". Read-only — no changes are made.
edit-meta-creative
Edit a Meta ad's creative content — landing page URL, primary text, headline, description, CTA, link description — across one ad or many. Use when the user says "change the URL on my ads", "update the copy", "swap the CTA", or anything that changes what an existing Meta ad shows. Meta does not allow in-place creative…
negative-keyword-sweep
Find wasted spend in Google Ads search terms and add negatives at the right scope (account list, campaign, or ad group). Use when the user says "find junk keywords", "stop wasting on bad searches", or wants a search-terms cleanup.
rotate-creative
Pause fatigued ads and ship fresh creative variants in their place. Works on both Meta and Google Ads. Use when CTR is dropping, frequency is climbing, or the user says "creative is tired" / "let's refresh ads". Always starts new variants paused.
launch-google-search
Launch a complete Google Ads Search campaign — campaign, ad group, responsive search ads, keywords, sitelinks, callouts, and negatives — built paused and ready to review. Use when the user wants to spin up a new Search campaign on Google Ads.
launch-meta-campaign
Launch a complete Meta Ads campaign — campaign, ad set, and ad(s) — built paused and ready to review. Use when the user wants a new Facebook/Instagram campaign.