Home / Skills / exposure-risk-quantification

exposure-risk-quantification

FAIR-aligned exposure quantification: turns a pile of recon findings into a defensible 0-100 + A-F org risk score (Likelihood x Impact, three ownership-aware factors: exposure/threat/impact), an ownership + proof demotion cap so unproven or weakly-owned findings can't inflate the number, a $-denominated FAIR loss-magnitude estimate (IBM/Ponemon per-record cost bands, cross-source record dedup, threat-factor annualization), attack-path amplification (curated red-team chain catalog + generic graph-walk engine, with a kill-chain vs shared-fate honesty gate), and a board-ready one-pager deliverabl

ScannedSkillSource: GitHub

2,831 stars +27 this week Updated 26d ago License MIT Context ≈157 tokens always loaded

74popular

Why this score

Stars

17/35

Usage (forks)

7/15

Upkeep

25/25

License

15/15

Owner history

10/10

This repo hosts 10 skills, so its 2,831 stars are split between them (about 283 each) for scoring.

Popularity score: 74/100 from public GitHub signals only. It shows how widely used and maintained this is, not how well it works. Not included yet: the fake-star check. The security scan is shown separately and doesn't change the score. How we rank

Security

Scanned Oct 20, 2026 at commit 114e0bb90e47, with Cisco's open-source skill-scanner.

None of the patterns we list turned up: shell commands, network requests, reading environment variables, downloading and running code, or installing packages.

A scan lists patterns in the code. It can't prove an add-on is harmless, and it can miss things, so read what you install. How we scan

Alternatives

Other makers' add-ons that do the same job, next to this one.

Name	Score	Stars	Context	Updated
This oneexposure-risk-quantification elementalsouls/Claude-OSINT · Skill	74	★ 2.8k	≈157 always	26d ago
risk agentii-ai/agentii-investment-intelligence · Skill Both about risk and exposure	56	★ 207	≈50 always	1mo ago
orca-data-exposure orcasecurity/orca-skills · Skill Both about exposure and risk	58	★ 55	≈84 always	20d ago
EchelonGraph CVE & Exposure echelongraph/echelongraph-mcp · MCP server Both about exposure and graph	54	★ 11	not measured	3d ago
Human Risk Scoring WYRE-AI/msp-claude-plugins · Skill Both about risk and org	53	★ 49	≈24 always	21d ago
catalyst-risk simonlin1212/Vibe-Research · Skill Both about risk	78	★ 2.7k	≈68 always	17d ago

Install

mkdir -p .claude/skills/exposure-risk-quantification

curl -sL https://codeload.github.com/elementalsouls/Claude-OSINT/tar.gz/114e0bb90e47f01e64dc72d1f00b4221e0dde875 | tar -xz -C .claude/skills/exposure-risk-quantification --strip-components=3 "Claude-OSINT-114e0bb90e47f01e64dc72d1f00b4221e0dde875/skills/exposure-risk-quantification"

To remove it later:

rm -rf .claude/skills/exposure-risk-quantification

npx skills add elementalsouls/Claude-OSINT --skill exposure-risk-quantification

Pinned to commit 114e0bb90e47 as listed by GitHub.

Context cost: ≈157 tokens loaded every session (name and description), plus ≈10k tokens when the skill is used.

The Claude Code command downloads this skill folder at the pinned commit into .claude/skills/. The Skills CLI (npx skills) works with many agents but can't pin a version, so it installs whatever is current.

Facts

Repo: elementalsouls/Claude-OSINT
Stars: 2,831
Forks: 520
Last push: 2026-10-09 (26d ago)
License: MIT
Owner: elementalsouls · since 2019
Language: Python
Works with: Claude Code, Skills CLI

View source on GitHub