Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add vyayasan/kyc-analyst --skill risk-assessmentgit clone --depth 1 https://github.com/vyayasan/kyc-analystWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/vyayasan/kyc-analyst/risk-assessment)<a href="https://agentmods.dev/skills/vyayasan/kyc-analyst/risk-assessment"><img src="https://agentmods.dev/badge/skills/vyayasan/kyc-analyst/risk-assessment/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/vyayasan/kyc-analyst/risk-assessment"><img src="https://agentmods.dev/badge/skills/vyayasan/kyc-analyst/risk-assessment.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00081 | $0.00949 |
| Opus 5 | $0.00041 | $0.00475 |
| Sonnet 5 | $0.00016 | $0.00190 |
| Haiku 4.5 | $0.00008 | $0.00095 |
Grade A, and why
risk-assessment scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 11d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 117 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Risk Assessment Skill - v1.0.0
Deterministic heuristic risk scoring using a four-factor weighted model aligned with Basel III, EBA Guidelines, FATF standards, and FinCEN guidance.
Overview
Risk assessment is performed during onboarding and refresh to classify customers into risk bands that determine the level of due diligence required and ongoing monitoring frequency.
Four-Factor Risk Model
Factor 1: Geographic Risk (30% Weight)
| Indicator | Score Range |
|---|---|
| UK/EU/US/developed economy | 5-15 |
| Mid-tier economies | 20-40 |
| FATF grey-list jurisdictions | 50-70 |
| High-risk/sanctioned jurisdictions | 80-100 |
| Multiple jurisdictions with offshore | +10-20 |
Assessed for: Customer residence, nationality, transaction destinations, wealth origin, business operations.
Factor 2: Customer Risk (35% Weight)
| Indicator | Score Range |
|---|---|
| Salaried employee, standard profile | 5-15 |
| Self-employed, professional | 20-35 |
| Business owner, HNWI | 40-60 |
| PEP (any tier) | 60-80 |
| Complex structures, unclear ownership | 70-90 |
| Adverse media findings | +20-40 |
Assessed for: Occupation, PEP status, source of wealth clarity, business complexity, directorships, adverse media.
Factor 3: Product Risk (25% Weight)
| Indicator | Score Range |
|---|---|
| Personal current/savings account | 5-15 |
| Investment/wealth management | 20-40 |
| Trade finance, correspondent banking | 50-70 |
| Virtual assets, high-value transactions | 60-80 |
| Complex structured products | 70-90 |
Assessed for: Account type, expected activity, transaction volume, product complexity.
Factor 4: Channel Risk (10% Weight)
| Indicator | Score Range |
|---|---|
| Face-to-face, standard onboarding | 5-10 |
| Remote/digital onboarding with verification | 15-25 |
| Intermediary-introduced | 30-50 |
| Anonymous/pseudonymous channels | 70-90 |
Assessed for: Onboarding method, documentation quality, intermediary involvement.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 11d ago First seen · 117 lines · 81 tokens per session scan A d01fe6fa0e82
risk-assessment is a skill published in the GitHub repository vyayasan/kyc-analyst (56 stars, last pushed 2mo ago), licensed MIT. It adds 81 tokens to every session and 949 once invoked, about $0.0004 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
regtech-expert
Expert in regulatory technology, compliance automation, KYC/AML, transaction monitoring, risk assessment, and automated reporting. Use when the user mentions compliance, KYC, AML, transaction monitoring, risk assessment, or regulatory reporting, or when the task involves KYC/AML Compliance, KYC/AML Program, Regulatory…
ainumbers
Deterministic regulatory-computation estate: 640+ compliance tools, chains, a verify ledger, and a timestamping anchor, callable over MCP with zero-egress in-page twins. Rules: synthetic data only; verify with verifyexecutionhash before trusting; return a ledger link; never paste PII. MCP: https://mcp.ainumbers.co/mcp.
deepidv-verify
Identity verification, KYC, face liveness, deepfake detection, adverse media screening, and AML/sanctions checks via the deepidv API. Use when a user needs to verify someone's identity, check if media is AI-generated, screen for sanctions/PEP status, or run adverse media checks.
compliance-documentation-requirements
Use when setting up or auditing how compliance documentation is structured, collected, and preserved for regulatory audit in Salesforce FSC — covering KYC data collection workflows, AML screening integration setup, audit trail configuration, and regulatory reporting readiness. Triggers: KYC form setup, AML integration…
compliance-documentation-requirements
Use when setting up or auditing how compliance documentation is structured, collected, and preserved for regulatory audit in Salesforce FSC — covering KYC data collection workflows, AML screening integration setup, audit trail configuration, and regulatory reporting readiness. Triggers: KYC form setup, AML integration…
skill
name: ainumbers description: Deterministic regulatory-computation estate: 640+ compliance tools, chains, a verify ledger, and a timestamping anchor, callable over MCP with zero-egress in-page twins. Rules: synthetic data only; verify with verifyexecutionhash before trusting; return a ledger link; never paste PII. MCP…