Risk register update
What it does
Reads a risk register together with meeting notes and incident reports and returns a draft update pack: existing risks whose exposure, controls, ownership or status the sources say have changed, new risk candidates, closure candidates, and the one owner decision each item needs. Never assigns or changes a likelihood, impact, score or colour and never edits the register; owners decide. Use when the user asks to "update the risk register from these minutes", "refresh the register with the incidents since the last review", "reconcile the register against the notes" or "what changed on our risks". Do not use for writing up an incident itself, use incident-postmortem-drafter or data-incident-impact-brief instead; to track actions from minutes, use corrective-action-tracker. Drafts for human review; never approves, authorises or signs off.
How to install it
In the web interface, open Context, then Skills, then Import, and choose Upload skill folder.
On the command line, copy the folder into .agents/skills/ in your project, or into ~/.vibe/skills/ to have it everywhere.
This skill ships 1 reference file. Take the whole folder, not just the SKILL.md. The skill reads those files while it runs, and without them it fails in a way that is hard to spot.
More in Security & GRC
Read the full skill in the source repository, part of awesome-mistral-vibe-skills, CC BY-SA 4.0. Not affiliated with, or endorsed by, Mistral AI.