pm-risk SKILL.md skillA

pm-risk from konglong87/superpm is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.

Install it, pinned

mdr add konglong87/superpm/pm-risk@git:20260924.3ac45f5

Pins git:20260924.3ac45f5 in mdr.lock. Pin the fingerprint instead.

Audit grade: A, 17 of 17 checks passed
Kind: SKILL.md skill
Repository: konglong87/superpm
Path: skills/04-risk-management/pm-risk/SKILL.md
Versions recorded: 5
Latest version: git:20260924.3ac45f5, committed Sep 24, 2026
First version recorded: Jul 2, 2026
Size: 12,615 bytes
Repository stars: 86
License: MIT

Use when: 技术方案完成后需要风险排查、上线前风险识别评估、项目关键节点风险管控 Do NOT use when: 项目极小风险可控、已存在完整的风险管理机制无需新建.

Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.

What the file says

## Preamble

```bash
echo "⚠️ 风险管控工具已启动"
```

---

## 写入时边界

只讨论时不写文件，启动检查不创建目录。用户要求保存产物时，先确认当前产品、精确输出路径及已有文件的覆盖/追加选择；确认后**仅在实际 Write 前**创建该输出文件的父目录。完整安装可参见 `skills/_shared/artifact-policy.md`，单独安装本 skill 也按本段执行。

---

## 跨 Agent 交互规则

当流程要求与用户交互时：

1. 如果当前环境支持 AskUserQuestion，使用 AskUserQuestion（最佳体验）。
2. 如果当前环境不支持 AskUserQuestion，必须用普通聊天消息提出同样问题。
3. 一次只问一个问题。
4. 提问后必须停止当前回合，等待用户回答（STOP and WAIT）。
5. 不得在用户回答前生成文档、写入 docs。
6. 已有 docs 文件不能替代本轮用户回答。

---

## 执行流程

### 步骤 1: 风险识别

使用 AskUserQuestion:

> 🔍 风险类型识别
>
> 请识别项目中可能存在的风险类型（可多选）：
>
> A) 技术风险（技术难度、新技术引入、架构设计）
> B) 进度风险（工期紧张、资源不足、依赖延期）
> C) 需求风险（需求变更、需求模糊、需求蔓延）
> D) 资源风险（人员变动、预算不足、设备资源）
> E) 外部风险（第三方服务、政策法规、市场变化）
> F) 质量风险（测试不充分、技术债务、性能问题）
> G) 运营风险（用户接受度、推广难度、客服压力）
> H) 全部识别（系统化排查）

### 步骤 2: 风险评估

使用 AskUserQuestion:

> 📊 风险评估维度
>
> 如何评估风险严重程度？
>
> A) 概率 × 影响（标准方法）
> B) 矩阵评估（概率-影响矩阵）
> C) 定性评估（高/中/低）

### 步骤 3: 制定应对策略

使用 AskUserQuestion:

> 🛡️ 风险应对策略
>
> 针对已识别风险，优先采用哪种策略？
>
> A) 规避（改变计划，消除风险）
> B) 缓解（降低概率或影响）
> C) 转移（外包、保险）
> D) 接受（预留应急资源）
> E) 根据风险类型灵活选择

### 步骤 4: 建立监控机制

使用 AskUserQuestion:

> 📈 风险监控频率
>
> 需要多频繁地监控风险？
>
> A) 每日（高风险项目）
> B) 每周（标准监控）
> C) 每迭代（迭代评审时）
> D) 按需（发现预警信号时）

### 步骤 5: 生成风险管控方案
…

Read the whole file at its exact version.

How to install

The exact contents, by fingerprint

mdr add konglong87/superpm/pm-risk@sha256:3f6ef545a8c539d0

The line at the top of this page pins the label git:20260924.3ac45f5, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.

Badge

[![mdr](https://markdownregistry.com/badge/art_nwa4ilfkjwvnhyyk.svg)](https://markdownregistry.com/a/art_nwa4ilfkjwvnhyyk)

3 badge image fetches in 30 days. What the badge shows.

Versions

The registry has recorded 5 versions of this file, between Jul 2, 2026 and Sep 24, 2026, about one every 21 days.

version	committed	commit	size	audit
git:20260924.3ac45f5 latest	2026-09-24	3ac45f5	12,615 B	A	view · diff
git:20260924.26fb3bb	2026-09-24	26fb3bb	12,276 B	A	view · diff
git:20260730.fea8df7	2026-07-30	fea8df7	12,356 B	A	view · diff
git:20260730.1745f93	2026-07-30	1745f93	12,681 B	A	view · diff
git:20260702.72f7781	2026-07-02	72f7781	12,548 B	A	view

Audit of the latest version

A 17 of 17 checks passed. Fixed automatic checks with no AI involved, so the same checks give the same answer every run.

pass: Frontmatter block present
pass: Frontmatter declares a name
pass: Frontmatter declares a description
pass: Size between 200 bytes and 200 KB (12615 bytes)
pass: No zero-width or bidi control characters
pass: No instruction hidden inside an HTML comment
pass: No link to an exfiltration or paste host
pass: No credential-shaped string
pass: No instruction to send local credentials anywhere
pass: No text hidden with inline styles
pass: No prompt-injection phrasing
pass: No curl or wget piped into a shell
pass: No recursive delete of root, home or parent
pass: No instruction to read or print local credentials
pass: No base64 blob over 200 characters
pass: No link to a raw IP address
pass: No script tag

Source

GitHub

konglong87/superpm · 86 stars · license MIT · pushed 2026-10-26 · branch main

API

GET https://markdownregistry.com/api/v1/artifacts/art_nwa4ilfkjwvnhyyk
GET https://markdownregistry.com/api/v1/resolve?ref=konglong87/superpm/pm-risk
GET https://markdownregistry.com/api/v1/blob/3f6ef545a8c539d0f6f7babffcc54c7271ff96f98c2d923c2b842a6a895205c7

Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.

Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.