Risk Matrix — 风险矩阵工具

Name: Risk Matrix — 风险矩阵工具
Author: linuszz

linuszz

Risk Matrix — 风险矩阵工具

v1.0.0

通过影响程度和可控性来识别和优先处理风险。用于风险管理、项目规划和战略决策支持。

0· 110·0 当前·0 累计

by @linuszz·MIT-0

生产力工具

下载技能包

License

MIT-0

最后更新

2026/3/22

安全扫描

VirusTotal

无害

查看报告

OpenClaw

安全

high confidence

这是一个纯指令的风险评估模板；其需求和运行时指令与所述目的一致，不请求额外凭证、安装或特权访问。

评估建议

此技能是一个无害的、独立的风险评估模板，安装安全。请考虑您提供给该技能的输出（项目详情、财务数据、内部触发因素）是否包含您不希望被记录或发送他处的敏感信息——该技能本身不会向外发送数据，但粘贴到提示中的任何敏感内容可能会存储在代理日志中或在其他技能中使用。如果需要与外部系统（工单、保险报价、电子表格）进行自动化集成，请优先选择明确声明仅需该集成所需特定API凭证的技能。...

详细分析 ▾

✓ 用途与能力

名称/描述（风险识别和优先排序）与 SKILL.md 内容一致：风险评估框架和输出模板。该技能不请求无关的二进制文件、凭证或配置路径。

✓ 指令范围

SKILL.md 仅包含用于识别和优先排序风险的分步指南和模板。它不会指示代理读取文件、访问环境变量、调用外部端点或执行所述目的之外的系统操作。

✓ 安装机制

没有安装规范和代码文件。作为纯指令技能，该技能不会向磁盘写入文件或获取外部包。

✓ 凭证需求

不需要环境变量、凭证或配置路径。声明的需求最少，与基于模板的风险评估技能相称。

✓ 持久化与权限

该技能不是强制始终运行，不请求持久存在，也不修改代理/系统配置。允许正常自主调用（平台默认）。

安全有层次，运行前请审查代码。

License

MIT-0

可自由使用、修改和再分发，无需署名。

查看条款 ↗

运行时依赖

无特殊依赖

版本

latestv1.0.02026/3/22

风险矩阵技能的初始版本： - 提供通过影响程度和可控性来识别、评估和优先处理风险的框架 - 包含示例风险类别、详细风险矩阵，以及风险识别、评估和缓解的结构化模板 - 为可视化矩阵、风险登记册、响应行动和预警指标提供清晰的输出格式 - 符合行业标准（ISO 31000、COSO），支持项目规划和战略决策支持 - 包含有效风险管理的实用建议和持续流程更新

● 无害

安装命令点击复制

官方npx clawhub@latest install risk-matrix

镜像加速npx clawhub@latest install risk-matrix --registry https://cn.clawhub-mirror.com

技能文档

元数据

名称: risk-matrix
描述: 风险识别和优先排序框架
触发词: risk matrix, risk assessment, risk analysis, risk prioritization

指令

您是一位风险经理，分析 $ARGUMENTS 的风险。识别、评估和优先排序风险，为缓解策略提供信息。

框架

风险评估维度

影响程度（重要性）

高: 重大财务损失、战略损害、监管问题
中: 中等财务影响、运营中断
低: 轻微影响，易于吸收

可控性

可管理: 在我们控制范围内
可缓解: 可以减少但无法消除
不可控: 外部因素，必须接受

2×2 风险矩阵

IMPACT HIGH MEDIUM LOW
┌───────────┬───────────┬───────────┐
HIGH │ CRITICAL │ ACCEPT │ ACCEPT │
│ ⚠️⚠️⚠️ │ ✅ │ ✅ │
CONTROLLABILITY │ Monitor & │ Manage │ Monitor │
MEDIUM │ Mitigate │ │ │
├───────────┼───────────┼───────────┤
LOW │ TRANSFER │ MANAGE │ IGNORE │
│ 🔸 │ ⚠️ │ ⚪ │
│ Insurance │ Conting. │ Watch │
└───────────┴───────────┴───────────┘

风险类别

Category	Examples
Financial	Cost overrun, currency, credit
Operational	Supply chain, technology, people
Strategic	Competition, market shift, regulation
Reputational	Brand damage, PR crisis
Compliance	Regulatory, legal, ethical
Environmental	Natural disaster, climate

输出格式

## Risk Matrix: [Project/Initiative/Decision]
Scope
Subject: [What's being analyzed]
Context: [Background]
Time Horizon: [Planning period]
Risk Identification
ID Risk Category Risk Description Trigger Event
R1 Financial [Description] [What would cause this]
R2 Operational [Description] [What would cause this]
R3 Strategic [Description] [What would cause this]
R4 Compliance [Description] [What would cause this]
R5 Reputational [Description] [What would cause this]
R6 Environmental [Description] [What would cause this]
Risk Assessment Matrix
Risk Impact Controllability Financial Impact Probability Priority
R1 High Low $X M 30% 🔴 Critical
R2 High Medium $Y M 20% 🔴 Critical
R3 Medium High $Z M 40% 🟡 Manage
R4 Medium Medium $W M 50% 🟡 Manage
R5 Low Low $V M 10% 🟢 Accept
R6 Low High $U M 60% 🟢 Accept
Visual Matrix

IMPACT HIGH MEDIUM LOW ┌─────────────┬─────────────┬─────────────┐ HIGH │ R1 🔴 │ R3 🟡 │ R5 🟢 │ │ [Name] │ [Name] │ [Name] │ CONTROLL-│ │ │ │ ABILITY │ R2 🔴 │ R4 🟡 │ R6 🟢 │ MEDIUM│ [Name] │ [Name] │ [Name] │ │ │ │ │ LOW │ [Empty] │ [Empty] │ [Empty] │ │ │ │ │ └─────────────┴─────────────┴─────────────┘ Legend: 🔴 Critical - Must address immediately 🟡 Manage - Active monitoring and mitigation 🟢 Accept - Monitor only


Risk Details & Mitigation
🔴 Critical Risks
R1: [Risk Name]
Description: [What could happen]
Trigger: [What would cause it]
Impact if realized: $X M / [Other consequences]
Probability: X%
Current controls: [What's in place]
Mitigation strategy: [What to do]
Owner: [Who's responsible]
Residual risk: [Risk after mitigation]
Cost of mitigation: $Y
R2: [Risk Name]
[Same structure]
🟡 Managed Risks
R3: [Risk Name]
Description: [What could happen]
Trigger: [What would cause it]
Impact if realized: $X M
Probability: X%
Monitoring plan: [How we'll track]
Contingency: [What we'll do if it happens]
Owner: [Who's responsible]
[Continue for all managed risks]
🟢 Accepted Risks
R5: [Risk Name]
Description: [What could happen]
Impact if realized: $X M
Why accepted: [Rationale]
Monitoring: [Basic tracking]
[Continue for all accepted risks]
Risk Response Summary
Risk Response Type Action Owner Status
R1 Mitigate [Action] [Name] ⏳ In progress
R2 Transfer Insurance/Contract [Name] ⏳ In progress
R3 Mitigate [Action] [Name] ⏳ In progress
R4 Accept Monitor [Name] ✅ In place
R5 Accept Monitor [Name] ✅ In place
R6 Accept Monitor [Name] ✅ In place
Response Types:
Mitigate: Reduce probability or impact
Transfer: Insurance, contracts, outsourcing
Accept: Acknowledge and monitor
Avoid: Change plan to eliminate risk
Risk Register
Total Risk Exposure: $X M (weighted by probability)
Critical Risks: 2 (require immediate action)
Managed Risks: 2 (active monitoring)
Accepted Risks: 2 (monitor only)
Risk Trend: Increasing / Stable / Decreasing
Risk Capacity: $Y M available to absorb
Headroom: $Z M
Early Warning Indicators
Risk Leading Indicator Threshold Current Status
R1 [Metric] [Value] [Actual] 🟢 OK
R2 [Metric] [Value] [Actual] 🟡 Watch
R3 [Metric] [Value] [Actual] 🟢 OK
Next Steps
Immediate (This Week)
[Action for R1]
[Action for R2]
Short-term (This Month)
[Action for R3]
[Set up monitoring]
Ongoing
Monthly risk review
Quarterly reassessment
Update as conditions change

提示

关注实质性风险——不要列出所有内容
具体说明触发因素和影响
尽可能量化财务影响
每个风险一个负责人
区分固有风险和残余风险
定期更新——风险会变化
过程与矩阵同样重要
不要过度缓解——有些风险是可以接受的

参考资料

ISO 31000:2018 - 风险管理指南
COSO 企业风险管理框架
Hubbard, Douglas. The Failure of Risk Management. 2009.

Metadata

Name: risk-matrix
Description: Risk identification and prioritization framework
Triggers: risk matrix, risk assessment, risk analysis, risk prioritization

Instructions

You are a risk manager analyzing risks for $ARGUMENTS.

Identify, assess, and prioritize risks to inform mitigation strategy.

Framework

Risk Assessment Dimensions

Impact (Significance)

High: Major financial loss, strategic damage, regulatory issue
Medium: Moderate financial impact, operational disruption
Low: Minor impact, easily absorbed

Controllability

Manageable: Within our control
Mitigatable: Can reduce but not eliminate
Non-controllable: External, must accept

The 2×2 Risk Matrix

                        IMPACT
                    HIGH         MEDIUM        LOW
                  ┌───────────┬───────────┬───────────┐
           HIGH   │ CRITICAL  │  ACCEPT   │  ACCEPT   │
                  │  ⚠️⚠️⚠️   │    ✅     │    ✅     │
  CONTROLLABILITY │ Monitor & │  Manage   │  Monitor  │
           MEDIUM │  Mitigate │           │           │
                  ├───────────┼───────────┼───────────┤
           LOW    │ TRANSFER  │  MANAGE   │  IGNORE   │
                  │  🔸       │    ⚠️     │    ⚪     │
                  │ Insurance │ Conting.  │  Watch    │
                  └───────────┴───────────┴───────────┘

Risk Categories

Category	Examples
Financial	Cost overrun, currency, credit
Operational	Supply chain, technology, people
Strategic	Competition, market shift, regulation
Reputational	Brand damage, PR crisis
Compliance	Regulatory, legal, ethical
Environmental	Natural disaster, climate

Output Format

## Risk Matrix: [Project/Initiative/Decision]
Scope
Subject: [What's being analyzed]
Context: [Background]
Time Horizon: [Planning period]
Risk Identification
ID Risk Category Risk Description Trigger Event
R1 Financial [Description] [What would cause this]
R2 Operational [Description] [What would cause this]
R3 Strategic [Description] [What would cause this]
R4 Compliance [Description] [What would cause this]
R5 Reputational [Description] [What would cause this]
R6 Environmental [Description] [What would cause this]
Risk Assessment Matrix
Risk Impact Controllability Financial Impact Probability Priority
R1 High Low $X M 30% 🔴 Critical
R2 High Medium $Y M 20% 🔴 Critical
R3 Medium High $Z M 40% 🟡 Manage
R4 Medium Medium $W M 50% 🟡 Manage
R5 Low Low $V M 10% 🟢 Accept
R6 Low High $U M 60% 🟢 Accept
Visual Matrix

IMPACT HIGH MEDIUM LOW ┌─────────────┬─────────────┬─────────────┐ HIGH │ R1 🔴 │ R3 🟡 │ R5 🟢 │ │ [Name] │ [Name] │ [Name] │ CONTROLL-│ │ │ │ ABILITY │ R2 🔴 │ R4 🟡 │ R6 🟢 │ MEDIUM│ [Name] │ [Name] │ [Name] │ │ │ │ │ LOW │ [Empty] │ [Empty] │ [Empty] │ │ │ │ │ └─────────────┴─────────────┴─────────────┘

Legend: 🔴 Critical - Must address immediately 🟡 Manage - Active monitoring and mitigation 🟢 Accept - Monitor only


Risk Details & Mitigation
🔴 Critical Risks
R1: [Risk Name]
Description: [What could happen]
Trigger: [What would cause it]
Impact if realized: $X M / [Other consequences]
Probability: X%
Current controls: [What's in place]
Mitigation strategy: [What to do]
Owner: [Who's responsible]
Residual risk: [Risk after mitigation]
Cost of mitigation: $Y
R2: [Risk Name]
[Same structure]
🟡 Managed Risks
R3: [Risk Name]
Description: [What could happen]
Trigger: [What would cause it]
Impact if realized: $X M
Probability: X%
Monitoring plan: [How we'll track]
Contingency: [What we'll do if it happens]
Owner: [Who's responsible]
[Continue for all managed risks]
🟢 Accepted Risks
R5: [Risk Name]
Description: [What could happen]
Impact if realized: $X M
Why accepted: [Rationale]
Monitoring: [Basic tracking]
[Continue for all accepted risks]
Risk Response Summary
Risk Response Type Action Owner Status
R1 Mitigate [Action] [Name] ⏳ In progress
R2 Transfer Insurance/Contract [Name] ⏳ In progress
R3 Mitigate [Action] [Name] ⏳ In progress
R4 Accept Monitor [Name] ✅ In place
R5 Accept Monitor [Name] ✅ In place
R6 Accept Monitor [Name] ✅ In place
Response Types:
Mitigate: Reduce probability or impact
Transfer: Insurance, contracts, outsourcing
Accept: Acknowledge and monitor
Avoid: Change plan to eliminate risk
Risk Register
Total Risk Exposure: $X M (weighted by probability)
Critical Risks: 2 (require immediate action)
Managed Risks: 2 (active monitoring)
Accepted Risks: 2 (monitor only)
Risk Trend: Increasing / Stable / Decreasing
Risk Capacity: $Y M available to absorb
Headroom: $Z M
Early Warning Indicators
Risk Leading Indicator Threshold Current Status
R1 [Metric] [Value] [Actual] 🟢 OK
R2 [Metric] [Value] [Actual] 🟡 Watch
R3 [Metric] [Value] [Actual] 🟢 OK
Next Steps
Immediate (This Week)
[Action for R1]
[Action for R2]
Short-term (This Month)
[Action for R3]
[Set up monitoring]
Ongoing
Monthly risk review
Quarterly reassessment
Update as conditions change

Tips

Focus on material risks - don't list everything
Be specific about triggers and impacts
Quantify financial impact where possible
One risk owner per risk
Distinguish between inherent and residual risk
Update regularly - risks change
The process matters as much as the matrix
Don't over-mitigate - some risk is acceptable

References

ISO 31000:2018 - Risk Management Guidelines
COSO Enterprise Risk Management Framework
Hubbard, Douglas. The Failure of Risk Management. 2009.

数据来源：ClawHub ↗ · 中文优化：龙虾技能库

OpenClaw 技能定制 / 插件定制 / 私有工作流定制

免费技能或插件可能存在安全风险，如需更匹配、更安全的方案，建议联系付费定制

了解定制服务

ID	Risk Category	Risk Description	Trigger Event
R1	Financial	[Description]	[What would cause this]
R2	Operational	[Description]	[What would cause this]
R3	Strategic	[Description]	[What would cause this]
R4	Compliance	[Description]	[What would cause this]
R5	Reputational	[Description]	[What would cause this]
R6	Environmental	[Description]	[What would cause this]

Risk	Impact	Controllability	Financial Impact	Probability	Priority
R1	High	Low	$X M	30%	🔴 Critical
R2	High	Medium	$Y M	20%	🔴 Critical
R3	Medium	High	$Z M	40%	🟡 Manage
R4	Medium	Medium	$W M	50%	🟡 Manage
R5	Low	Low	$V M	10%	🟢 Accept
R6	Low	High	$U M	60%	🟢 Accept

Risk	Response Type	Action	Owner	Status
R1	Mitigate	[Action]	[Name]	⏳ In progress
R2	Transfer	Insurance/Contract	[Name]	⏳ In progress
R3	Mitigate	[Action]	[Name]	⏳ In progress
R4	Accept	Monitor	[Name]	✅ In place
R5	Accept	Monitor	[Name]	✅ In place
R6	Accept	Monitor	[Name]	✅ In place

Risk	Leading Indicator	Threshold	Current	Status
R1	[Metric]	[Value]	[Actual]	🟢 OK
R2	[Metric]	[Value]	[Actual]	🟡 Watch
R3	[Metric]	[Value]	[Actual]	🟢 OK

License

运行时依赖

版本

安装命令 点击复制

技能文档

元数据

指令

框架

风险评估维度

2×2 风险矩阵

风险类别

输出格式

Scope

Risk Identification

Risk Assessment Matrix

Visual Matrix

Risk Details & Mitigation

🔴 Critical Risks

🟡 Managed Risks

🟢 Accepted Risks

Risk Response Summary

Risk Register

Early Warning Indicators

Next Steps

提示

参考资料

Metadata

Instructions

Framework

Risk Assessment Dimensions

The 2×2 Risk Matrix

Risk Categories

Output Format

Scope

Risk Identification

Risk Assessment Matrix

Visual Matrix

Risk Details & Mitigation

🔴 Critical Risks

🟡 Managed Risks

🟢 Accepted Risks

Risk Response Summary

Risk Register

Early Warning Indicators

Next Steps

Tips

References

安装命令点击复制