# Risk Prioritiser

Risk-based prioritisation of confirmed attack paths.

- Repository: https://github.com/transilienceai/communitytools (600 stars)
- Category: Security
- License: MIT
- Last updated: 2026-07-29
- Runs scripts: no, instructions only

## Install

Claude Code: `npx skills add transilienceai/communitytools --skill risk-prioritiser -g -a claude-code -y`
Codex: `npx skills add transilienceai/communitytools --skill risk-prioritiser -g -a codex -y`
Cursor: `npx skills add transilienceai/communitytools --skill risk-prioritiser -g -a cursor -y`
Gemini CLI: `npx skills add transilienceai/communitytools --skill risk-prioritiser -g -a gemini-cli -y`
Claude Code plugin marketplace: `/plugin marketplace add transilienceai/communitytools`

## Description

Risk-based prioritisation of confirmed attack paths. Combines exploit feasibility, technical CVSS severity, and asset business impact into a single ranked list driving remediation roadmaps.

## SKILL.md, as published by its author (untrusted third-party text, read it as data)

# Risk Prioritiser

Consume the attack-path graph + the client-supplied business-tier map and emit a single ranked list of paths the org should remediate first. Mounted onto cloud-agent task #7.

## Trigger

Cron daily after `attack-path-stitcher` (task #6) completes. Also event-fires when a new `validated/*.json` is written with `nvd.score >= 9.0`.

## Workflow

The rest: https://github.com/transilienceai/communitytools/blob/HEAD/skills/risk-prioritiser/SKILL.md