casemark/risk-analysis
skills/legal/risk-analysis/SKILL.md
Generates structured risk analysis summaries for legal matters, identifying and evaluating risks by severity and likelihood with quantified exposures and mitigation strategies. Use when preparing risk assessments, exposure analyses, liability summaries, or pre-filing risk evaluations across litigation, regulatory, contractual, reputational, and operational domains.
$ install --global
skillsauthnpx skillsauth add casemark/skills risk-analysisInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Apr 17, 2026, 2:17 PM16.6s1 file scanned
SKILL.md
- name:
- risk-analysis
- description:
- Generates structured risk analysis summaries for legal matters, identifying and evaluating risks by severity and likelihood with quantified exposures and mitigation strategies. Use when preparing risk assessments, exposure analyses, liability summaries, or pre-filing risk evaluations across litigation, regulatory, contractual, reputational, and operational domains.
Risk Analysis Summary
Produces a prioritized risk analysis from matter documents, quantifying exposures and recommending mitigations for attorneys, clients, and stakeholders.
Prerequisites
- Matter documents — contracts, pleadings, correspondence, regulatory filings, insurance policies
- Matter context — jurisdiction, industry, phase (pre-filing / active / settlement), key parties
- Risk tolerance — if known, acceptable exposure thresholds or strategic constraints
Workflow
1. Executive Overview
- Matter snapshot — one-paragraph factual summary
- Top 3–5 risks — ranked by severity × likelihood, one sentence each with estimated exposure
- Immediate actions — time-sensitive deadlines, SOL dates, regulatory windows
2. Risk Register
Assign each risk a sequential ID (R-01, R-02, ...) and complete:
| Field | Content |
|---|---|
| Category | Contractual / Regulatory / Litigation / Financial / Reputational / Operational |
| Description | Specific risk statement grounded in document evidence |
| Factual basis | Cite provisions, regulatory sections, correspondence, or facts |
| Legal authority | Statutes, regulations, case law — mark [VERIFY] if uncertain |
| Likelihood | High / Medium / Low with reasoning |
| Severity | Critical / Major / Moderate / Minor |
| Financial exposure | Best-case / most-likely / worst-case range |
| Non-monetary impact | Reputational harm, sanctions, operational disruption |
| Mitigating factors | Defenses, insurance coverage, factual counterarguments |
| Interdependencies | Other risk IDs that compound or conflict |
3. Risk Matrix
Plot risk IDs on a 3×3 severity (rows) × likelihood (columns) grid:
│ Low │ Medium │ High
──────────────┼────────────────┼────────────────┼──────────────
Critical │ │ │
Major │ │ │
Moderate │ │ │
4. Mitigation Strategies
For each risk rated Major/High or above:
- Action — specific, practical step
- Type — Legal defense / Procedural / Settlement / Insurance / Operational
- Feasibility — High / Medium / Low
- Effectiveness — estimated exposure reduction
- Resources — cost, time, personnel
- Trade-offs — whether this mitigation exacerbates another risk
5. Timeline
| Priority | Risk ID | Action | Deadline/Trigger | Owner | |---|---|---|---|---| | Urgent | | | | | | Near-term (30–90 days) | | | | | | Strategic (90+ days) | | | | |
Flag all hard deadlines: statutes of limitations, cure periods, regulatory filing dates.
6. Information Gaps
List areas needing additional investigation, discovery, or expert consultation to refine the assessment.
Pitfalls
- Ungrounded risks — every risk must cite specific documents or facts; never assert risk in the abstract
- Missing quantification — provide dollar ranges with stated assumptions; flag estimates as conservative or aggressive
- Fact vs. inference — clearly distinguish established facts, reasonable inferences, and speculative scenarios
- Tone imbalance — neither minimize genuine risks nor catastrophize manageable exposures
- Audience mismatch — use language accessible to business stakeholders; define legal terms on first use
- Unacknowledged uncertainty — state confidence levels; identify what additional information would change the assessment
- Ignored interdependencies — flag where addressing one risk may worsen another
- Jurisdiction blindness — note where analysis depends on forum, governing law, or regulatory body
Related Skills
casemark/medical-records-gap-analysis
tools
VerifiedTrustedCommunity
Audits the complete in-scope medical-record universe in a litigation matter and produces an attorney-facing, Bates-cited analysis of treatment gaps, missing records or providers, baseline coverage, material billing or production mismatches, and complaint evolution. Use when asked to find missing medical records, analyze treatment gaps or first-care timing, identify absent providers, assess whether a production is complete, or prepare a records-request target list. Use medical-record-chronology instead when the primary request is a chronological clinical narrative.
40SKILL.mdUpdated Sep 3, 2026
casemark/private-placement-memo
development
VerifiedTrustedCommunity
Drafts a legally compliant Private Placement Memorandum for Regulation D offerings (Rule 506(b)/506(c)), covering full disclosure framework including risk factors, capitalization, securities terms, use of proceeds, and investor qualification requirements. Enforces SEC anti-fraud compliance under Section 10(b)/Rule 10b-5, blue sky law considerations, and accredited investor verification under Rule 501. Use this skill when drafting PPMs, offering memorandums, Reg D disclosure documents, or private offering circulars for issuers raising capital from sophisticated investors. Also trigger when the user mentions private placement disclosure, offering memorandum, Reg D fundraising, or accredited investor verification. Even if the user just says "PPM" or "draft our offering memo," use this skill.
40SKILL.mdUpdated Apr 17, 2026
casemark/privacy-law-updates
data-ai
VerifiedTrustedCommunity
Generates structured privacy and data protection law briefings across US, EU, UK, and other jurisdictions. Organizes by jurisdiction with compliance deadlines, enforcement actions, and legislative changes. Use when preparing privacy law briefings, compliance updates, regulatory change summaries, or data protection landscape reviews.
40SKILL.mdUpdated Apr 17, 2026
casemark/prior-art-summary
testing
VerifiedTrustedCommunity
Generates structured summaries of prior art references for patent prosecution, validity analysis, and freedom-to-operate assessments. Maps disclosures to claim elements with precise citations. Use when summarizing prior art, analyzing patent landscapes, mapping references to claims, or preparing office action responses.
40SKILL.mdUpdated Apr 17, 2026