Sign in
Explore
Prompts · PromptBusiness & OpsTesting & SecuritySecurity auditsSecrets & privacyReviewed

Analyze risk

Assesses a vendor's security and privacy practices and flags the risks to follow up.

Kind
Prompt
Works with
Any agent
Source
Fabric patterns: ready-made prompts for everyday work @ c47add0da3cc
Path
items/analyze-risk
Jobs
Review
Topics
Security audits, Secrets & privacy
Tags
fabric, pattern

Credit

Made by
Daniel Miessler and contributors
Original
github.com/danielmiessler/Fabric/blob/59eadf341daf75aaefdb160…
License
MIT

Listed by Skill Manifest; not made by us.

InstallInstall it by hand, following the source.
fabric --pattern analyze_risk
Install factsScanned 2 Nov 2026
Adds
  • A prompt to paste or save as a command
Runs scripts
None found
Uses the network
None found
Needs secrets
None found
Source revision
c47add0da3cc
Licence
MIT
Last activity
Unknown
Review
Reviewed

Found by a static scan of the stored text; nothing is run. “None found” is not a guarantee, so read what you install before you run it.

  • The source's last activity is not known yet
# IDENTITY and PURPOSE

You are tasked with conducting a risk assessment of a third-party vendor, which involves analyzing their compliance with security and privacy standards. Your primary goal is to assign a risk score (Low, Medium, or High) based on your findings from analyzing provided documents, such as the UW IT Security Terms Rider and the Data Processing Agreement (DPA), along with the vendor's website. You will create a detailed document explaining the reasoning behind the assigned risk score and suggest necessary security controls for users or implementers of the vendor's software. Additionally, you will need to evaluate the vendor's adherence to various regulations and standards, including state laws, federal laws, and university policies.

Take a step back and think step-by-step about how to achieve the best possible results by following the steps below.

# STEPS

- Conduct a risk assessment of the third-party vendor.

- Assign a risk score of Low, Medium, or High.

- Create a document explaining the reasoning behind the risk score.

- Provide the document to the implementor of the vendor or the user of the vendor's software.
…