@windyroad/risk-scorer weekly downloads statistics

@windyroad/risk-scorer

Pipeline risk scoring, commit/push gates, and secret leak detection for Claude Code and Codex. Scores every change for risk and blocks high-risk commits and pushes before they happen. Maturity: Experimental (suite-bootstrap window; 2047 invocations / 30d).

Part of Windy Road Agent Plugins.

What It Does

The risk-scorer plugin brings ISO 31000-aligned risk management to your AI coding workflow. It:

1. Scores risk on every edit, assessing cumulative pipeline risk as changes build up
2. Gates commits -- blocks git commit when cumulative risk exceeds your policy threshold
3. Gates pushes -- blocks git push for high-risk changesets (use npm run push:watch instead)
4. Detects secrets -- scans edits for API keys, tokens, passwords, and other credentials before they're written
5. Reviews plans -- scores implementation plans for risk before you start building
6. Gates outbound prose -- reviews gh issue/pr bodies, security advisories, npm publish content, and .changeset/*.md drafts for confidential-information leaks before they reach external surfaces

All thresholds are configurable through your project's RISK-POLICY.md.

Install

npx @windyroad/risk-scorer

Restart Claude Code after installing.

For Codex, install the plugin and its native custom agents together:

npx @windyroad/risk-scorer --runtime codex --scope project

Use --scope user to make the agents available across repositories. Restart Codex after installing. Marketplace/tag-only installs self-repair the user agent files at SessionStart and request one additional restart when needed.

Usage

The plugin works automatically once installed. On first run in a project without a risk policy, it blocks edits and directs you to generate one:

/wr-risk-scorer:update-policy

This creates a RISK-POLICY.md tailored to your project, defining impact levels, likelihood scales, risk appetite, and the risk matrix -- all aligned to ISO 31000.

How It Works

Hook	Trigger	What it does
risk-score.sh	Every prompt	Injects risk scoring context
secret-leak-gate.sh	Edit or Write	Blocks writes containing secrets
wip-risk-gate.sh	Edit or Write	Blocks edits if WIP risk hasn't been assessed
risk-policy-enforce-edit.sh	Edit or Write	Blocks edits if no RISK-POLICY.md exists
git-push-gate.sh	Bash (git push)	Blocks direct git push; requires npm run push:watch
risk-score-commit-gate.sh	Bash (git commit)	Blocks commits when risk exceeds threshold
risk-score-plan-enforce.sh	ExitPlanMode	Ensures plans are risk-scored before execution
plan-risk-guidance.sh	EnterPlanMode	Injects risk guidance into plan mode
external-comms-gate.sh	Bash, Edit, Write	Gates outbound prose (gh issue/pr, gh api .../security-advisories, npm publish, .changeset/*.md) on confidential-information leak review
wip-risk-mark.sh	After edit	Records WIP risk assessment
risk-score-mark.sh	Agent completes	Marks risk review as done; writes external-comms marker on wr-risk-scorer:external-comms PASS
risk-hash-refresh.sh	After Bash	Refreshes content hashes
risk-slide-marker.sh	Agent or Bash	Slides the review marker forward across non-edit operations so an active review session is not invalidated by intervening Bash or sub-agent calls

Agents

Claude Code includes the routing agent plus six specialised agents. Codex installs the six mode-specific agents directly:

Agent	Purpose
wr-risk-scorer:agent	Routes to the appropriate mode-specific agent
wr-risk-scorer:wip	Assesses cumulative risk after each edit
wr-risk-scorer:pipeline	Scores pipeline actions (commit, push, release)
wr-risk-scorer:plan	Reviews implementation plans for risk
wr-risk-scorer:policy	Validates RISK-POLICY.md for ISO 31000 compliance
wr-risk-scorer:external-comms	Reviews drafts of outbound prose (gh issues/PRs, advisories, npm publish, changeset bodies) for confidential-information leaks per RISK-POLICY.md
wr-risk-scorer:inbound-report	Reviews inbound third-party reports (problem-report issues, Q&A discussions, security-advisory submissions) for Request-risk + Fix-risk per RISK-POLICY.md § Inbound Report Risk Classes — sibling of :external-comms (NOT extension). Consumed by the assessment-pipeline (P079 / ADR-062). Serves the report-without-pre-classifying acknowledgement (verdict-on-close) and the mechanical-stage carve-out.

On-demand assessment skills

Skill	Purpose
/wr-risk-scorer:assess-wip	WIP risk nudge for the current uncommitted diff
/wr-risk-scorer:assess-release	Pipeline risk assessment for the unpushed queue (pre-satisfies the commit gate)
/wr-risk-scorer:assess-external-comms	External-comms leak review for a draft outbound body (pre-satisfies the external-comms gate)
/wr-risk-scorer:assess-inbound-report	Inbound-report risk review for a third-party submission — two-axis (Request-risk + Fix-risk) classification per RISK-POLICY.md (P079 / ADR-062). Serves on-demand assessment and pre-flight governance checks.
/wr-risk-scorer:create-risk	Create a standing-risk register entry (interactive authoring; orchestrator-driven prefilled invocation via --slug / --prefill flags per ADR-059)
/wr-risk-scorer:bootstrap-catalog	Bootstrap docs/risks/ register from existing .risk-reports/ corpus per ADR-059 — walks reports, dedupes by ADR-056 slug, emits one R<NNN>-<slug>.active.md per unique slug. Idempotent. Auto-triggers from /install-updates Step 6.5.1 when register is empty + RISK-POLICY.md present + .risk-reports/ non-empty
/wr-risk-scorer:update-policy	Generate or update RISK-POLICY.md

Internal-use wrapper skills…