casemark/risk-assessment
skills/legal/risk-assessment/SKILL.md
Generates structured legal risk assessment reports with categorized risks, 5x5 scoring matrices, and mitigation strategies. Use when preparing risk assessments, due diligence reports, transaction risk reviews, venture analysis, or board-level risk summaries.
$ install --global
skillsauthnpx skillsauth add casemark/skills risk-assessmentInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Apr 17, 2026, 2:17 PM12.8s1 file scanned
SKILL.md
- name:
- risk-assessment
- description:
- Generates structured legal risk assessment reports with categorized risks, 5x5 scoring matrices, and mitigation strategies. Use when preparing risk assessments, due diligence reports, transaction risk reviews, venture analysis, or board-level risk summaries.
Legal Risk Assessment
Produces executive-ready risk reports evaluating likelihood, impact, and mitigation across legal risk categories for business scenarios, transactions, or operational decisions.
Prerequisites
Gather before starting:
- Scenario description — transaction summary, venture details, or decision under review
- Source documents — contracts, term sheets, regulatory filings, corporate records
- Organizational context — industry, jurisdiction(s), risk tolerance, strategic objectives
- Known constraints — timeline, budget, regulatory environment, stakeholder concerns
Workflow
1. Document Review
Extract from all provided materials:
| Element | Look For | |---|---| | Obligations & duties | Performance requirements, deadlines, conditions precedent | | Representations & warranties | Scope, survival periods, indemnification triggers | | Financial exposure | Stated amounts, penalties, liquidated damages | | Jurisdictional issues | Choice of law, forum selection, regulatory bodies | | Notice & cure provisions | Timelines, methods, non-compliance consequences | | Ambiguous or silent terms | Missing definitions, unclear risk allocation, gaps |
2. Risk Identification
Categorize all material risks:
| Category | Key Inquiry | |---|---| | Regulatory compliance | Licensing, permits, reporting, pending rule changes | | Contractual liability | Breach exposure, indemnification chains, liability gaps | | Litigation probability | Dispute history, enforceability, venue risk | | IP vulnerability | Ownership disputes, licensing gaps, infringement exposure | | Employment & labor | Classification, non-competes, WARN Act, benefits | | Tax implications | Structure-dependent exposure, transfer pricing, nexus | | Reputational & governance | Fiduciary duties, disclosure obligations, ESG |
3. Risk Scoring
Rate each risk on a 5x5 matrix. Rating = Likelihood x Impact.
Likelihood: 1 Remote — 2 Unlikely — 3 Possible — 4 Likely — 5 Near certain
Impact: 1 Negligible (<$50K) — 2 Minor ($50K–$500K) — 3 Moderate ($500K–$5M) — 4 Major ($5M–$50M) — 5 Severe (>$50M)
Thresholds: Low (1–6), Medium (7–12), High (13–19), Critical (20–25)
4. Mitigation Strategies
For each Medium/High/Critical risk, propose mitigations and assess feasibility, cost, and residual risk:
| Strategy | Examples | |---|---| | Eliminate | Restructure transaction, remove problematic terms | | Transfer | Insurance, indemnification, contractual risk allocation | | Reduce | Compliance protocols, enhanced due diligence, reps & warranties | | Accept | Document rationale, establish reserves, monitor triggers |
5. Gap Analysis
Flag explicitly:
- Missing documents or facts affecting risk precision
- Unsettled legal standards or pending regulatory changes
- Recommended due diligence steps or expert consultations
Output Structure
## Executive Summary
- 3–5 sentence risk posture overview
- Top 3 risks with ratings
- Go / No-Go / Conditional recommendation
## Risk Matrix
[Table: Risk | Category | Likelihood | Impact | Rating | Key Driver]
## Detailed Risk Analysis
### [Risk Category]
#### [Specific Risk]
- **Exposure**: factual basis with document references
- **Legal basis**: applicable statute or case law
- **Likelihood rationale**: enforcement trends, precedent
- **Impact quantification**: dollar range, operational consequences
- **Mitigation options**: ranked by effectiveness
## Information Gaps & Limitations
[Bulleted list with recommended next steps]
## Recommendations
- Numbered, actionable items tied to specific risks
- Prioritized by risk rating and feasibility
- Decision framework: proceed / modify / decline
Checks
- Reference specific contract sections, statutes, and facts — no generic risk language
- Quantify exposure with dollar ranges; acknowledge uncertainty explicitly
- Calibrate recommendations to the organization's stated risk tolerance
- Distinguish deal-breakers from commercially acceptable risks
- Mark unverifiable authority with
[VERIFY] - Do not minimize risks to favor a preferred outcome
- Note jurisdiction-specific variations where U.S. state law divergence is material
- Keep the executive summary accessible to non-lawyers
Related Skills
casemark/medical-records-gap-analysis
tools
VerifiedTrustedCommunity
Audits the complete in-scope medical-record universe in a litigation matter and produces an attorney-facing, Bates-cited analysis of treatment gaps, missing records or providers, baseline coverage, material billing or production mismatches, and complaint evolution. Use when asked to find missing medical records, analyze treatment gaps or first-care timing, identify absent providers, assess whether a production is complete, or prepare a records-request target list. Use medical-record-chronology instead when the primary request is a chronological clinical narrative.
40SKILL.mdUpdated Sep 3, 2026
casemark/private-placement-memo
development
VerifiedTrustedCommunity
Drafts a legally compliant Private Placement Memorandum for Regulation D offerings (Rule 506(b)/506(c)), covering full disclosure framework including risk factors, capitalization, securities terms, use of proceeds, and investor qualification requirements. Enforces SEC anti-fraud compliance under Section 10(b)/Rule 10b-5, blue sky law considerations, and accredited investor verification under Rule 501. Use this skill when drafting PPMs, offering memorandums, Reg D disclosure documents, or private offering circulars for issuers raising capital from sophisticated investors. Also trigger when the user mentions private placement disclosure, offering memorandum, Reg D fundraising, or accredited investor verification. Even if the user just says "PPM" or "draft our offering memo," use this skill.
40SKILL.mdUpdated Apr 17, 2026
casemark/privacy-law-updates
data-ai
VerifiedTrustedCommunity
Generates structured privacy and data protection law briefings across US, EU, UK, and other jurisdictions. Organizes by jurisdiction with compliance deadlines, enforcement actions, and legislative changes. Use when preparing privacy law briefings, compliance updates, regulatory change summaries, or data protection landscape reviews.
40SKILL.mdUpdated Apr 17, 2026
casemark/prior-art-summary
testing
VerifiedTrustedCommunity
Generates structured summaries of prior art references for patent prosecution, validity analysis, and freedom-to-operate assessments. Maps disclosures to claim elements with precise citations. Use when summarizing prior art, analyzing patent landscapes, mapping references to claims, or preparing office action responses.
40SKILL.mdUpdated Apr 17, 2026