Creator · guoliang1114-boop

Last updated · Aug 24, 2026

audit-risk-assessment

REVIEW · 69Registry indexed

基于 ISA 315 (Revised 2019) 框架执行审计计划阶段的风险评估。当用户需要 (1) 制定审计计划 (2) 识别重大错报风险 (3) 评估内部控制 (4) 确定重要性水平 (5) 设计审计策略时使用。输出结构化风险评估文档。

agent-skill

OpenAgentSkill Trust Score

69/100

Sandbox only

Quality62/100

Audit79/100

Stars37

Verified installs0

View on GitHub Open full audit README badge Claim this skill

Install targets

Codex install prompt

Install the "audit-risk-assessment" agent skill from https://github.com/guoliang1114-boop/AriaAI/tree/main/skills/audit-risk-assessment. Read its SKILL.md or equivalent instructions first, install only the files needed for this workspace, and summarize any required setup before using it. Skill purpose: 基于 ISA 315 (Revised 2019) 框架执行审计计划阶段的风险评估。当用户需要 (1) 制定审计计划 (2) 识别重大错报风险 (3) 评估内部控制 (4) 确定重要性水平 (5) 设计审计策略 时使用。输出结构化风险评估文档。 After the install attempt, report the result to https://www.openagentskill.com/api/agent/outcome with POST JSON {"event_id":"install_<unique-id>","skill_slug":"guoliang1114-boop-audit-risk-assessment","task":"Install audit-risk-assessment","agent":"codex","outcome":"success","install_used":true}. Replace event_id with a unique value and outcome with success or failed. Report success only after the skill is installed and a minimal verification passes.

Supply asset profile

Research and knowledge work

Deep research, source comparison, literature review, RAG, knowledge search, and reports.

Browse track

Scenario

Document processing

I need my agent to read PDFs, extract tables, and turn documents into structured data.

Agent fit

Claude Code + CLI + Codex

Codex, Claude Code, Cursor, CLI, or custom agents.

Install

Ready

npx skills add guoliang1114-boop/AriaAI --skill audit-risk-assessment

Maintenance

fresh

Pushed today

Risk

Needs review

Low GitHub adoption signal

GitHub quality

62/100 Quality · 77/100 Trust

Coverage tags

ResearchDocument processingsecurityagent-skill

Review notes

Low GitHub adoption signal · Quality score needs review

Agent adoption scorecard

Trust, audit, and install readiness at a glance

These scores combine public repository metadata, OpenAgentSkill review signals, maintenance freshness, and install readiness. They are a shortlist signal, not a replacement for human review.

Quality

Promising

Useful candidate, but compare it with alternatives before adopting.

Trust

Sandbox only

Useful candidate with missing or mixed trust signals. Keep it in an isolated workspace until the outcome loop proves task fit.

Audit

Needs review

A machine-readable review of install readiness, security metadata, maintenance, and adoption risk.

OpenAgentSkill Trust Score v5

Human review before install

Run only in a sandbox and compare close alternatives before using it for real work.

CodexClaude CodeCursorOpenAgentSkill CLI

Stars

37 GitHub stars

Repo activity

37 stars, 2 forks

Maintenance

Pushed today

License

MIT

Install

npx skills add guoliang1114-boop/AriaAI --skill audit-risk-assessment

Install safety

standard package or runtime install path

Permission surface

filesystem or document access

Agent outcomes

No agent outcome data yet

Docs

Usable metadata, review docs

Risk summary

Review before production

Low GitHub adoption signal
Quality score needs review
GitHub adoption: 37 GitHub stars
Stars/forks activity: 37 stars, 2 forks; issue activity unavailable in current metadata

Install readiness

Install path available

Install path is available
Repository evidence is available
License is declared
No Agent Proven outcome evidence yet

Agent-readable metadata

Machine-readable decision data for this skill.

Use this block or the embedded JSON to decide whether an agent should install this skill, choose an alternative, or ask for human review first.

View technical data+

Open JSON

Suited tasks

Document processing workflows
Claude Code teams
builders willing to evaluate younger projects
Read uploaded files

Suited agents

CodexClaude CodeCursorOpenAgentSkill CLICLI

Install decision

Command: npx skills add guoliang1114-boop/AriaAI --skill audit-risk-assessment
Policy: review
Human review: yes

Trust and risk

Trust: 69/100
Audit: 79/100
Risk level: Needs review

Outcome loop

Endpoint: /api/agent/outcome
Event ID: resolve
Outcomes: 5

Install command

npx skills add guoliang1114-boop/AriaAI --skill audit-risk-assessment

Public audit Eval report Resolve API Install handoff

Do not use when

teams that need a vendor-supported SLA
production agents without a repository review
Low GitHub adoption signal
Quality score needs review
GitHub adoption: 37 GitHub stars

Alternative

Wazuh

16.3K Stars

npx skills add wazuh/wazuh

Alternative

Maigret

32.9K Stars

npx skills add soxoj/maigret

Alternative

Nuclei

29.2K Stars

npx skills add projectdiscovery/nuclei

Alternative

Infisical

27.4K Stars

npx skills add Infisical/infisical

Agent safety v2

63/100 · Review before install

Reviewed with permission notesreview

Usable candidate, but the agent should surface permission and audit notes before installation.

Require human approval before installing into a real workspace.

Resolve via API

medium

Network access

Skill likely fetches remote pages, APIs, repositories, or external services.

medium

Filesystem access

Skill may read or write project files, documents, generated artifacts, or local workspace state.

Low GitHub adoption signal

Agent resolve plan

Let an agent verify fit before installing.

The Resolve API returns the selected skill, alternatives, safety policy, audit notes, install target, and copy-paste prompt an agent can follow without scraping this page.

Open text plan

Open JSON

/api/agent/resolve?task=Use%20audit-risk-assessment%20for%20an%20agent%20workflow&agent=codex&max_risk=medium

Resolve text

/api/agent/resolve?task=Use%20audit-risk-assessment%20for%20an%20agent%20workflow&agent=codex&max_risk=medium&format=text

Install handoff

/api/skills/guoliang1114-boop-audit-risk-assessment/install

Agent should check

Task fit and alternatives from Resolve API.
Audit score, trust score, and safety policy warnings.
Install target compatibility for Codex, Claude Code, Cursor, or CLI.

Copy prompt

Task: Use audit-risk-assessment in this workspace.
Resolve first: https://www.openagentskill.com/api/agent/resolve?task=Use%20audit-risk-assessment%20for%20an%20agent%20workflow&agent=codex&max_risk=medium
Review install handoff: https://www.openagentskill.com/api/skills/guoliang1114-boop-audit-risk-assessment/install
Install command: npx skills add guoliang1114-boop/AriaAI --skill audit-risk-assessment
Before running it, summarize audit warnings, required permissions, and the fallback skill if install is risky.

Agent handoff

Give an agent the install path, not another directory page.

Use the public install endpoint to fetch the command, safety checklist, target prompts, and canonical links for this skill.

Open install API

Install handoff

/api/skills/guoliang1114-boop-audit-risk-assessment/install

LLM text format

/api/skills/guoliang1114-boop-audit-risk-assessment/install?format=text

Find alternatives

/api/skills/search?q=audit-risk-assessment&limit=3

Agent prompt

Use audit-risk-assessment for this task. Review https://www.openagentskill.com/api/skills/guoliang1114-boop-audit-risk-assessment/install, then install with: npx skills add guoliang1114-boop/AriaAI --skill audit-risk-assessment

Registry metadata

Agent-readable profile for automatic skill selection.

This page exposes the same decision, trust, audit, use-case, and install signals through the Registry API, so agents can rank this skill without scraping the UI.

Open manifest

Manifest

/api/registry/manifest/guoliang1114-boop-audit-risk-assessment

LLM text

/api/registry/manifest/guoliang1114-boop-audit-risk-assessment?format=text

Install alias

/api/registry/install/guoliang1114-boop-audit-risk-assessment

Recommend

/api/registry/recommend?task=Use%20audit-risk-assessment%20in%20an%20agent%20workflow&limit=3

Agent fit

61/100

Document processing

Use-case tags

Document processing RAG and knowledge Browser automation

Platforms

Claude Code

Audit report

Needs review · 79/100

A machine-readable review of install readiness, security metadata, maintenance, and adoption risk.

View audit report View eval report

Agent decision cockpit

Fallback candidate for Document processing

Prototype with this skill first; keep a fallback candidate ready.

Readiness

Prototype

Stage

Role in stack

Fallback candidate

Primary fit

Document processing

Trust label

Prototype first

Install path

Command ready

Use when

Document processing workflows
Claude Code teams
builders willing to evaluate younger projects

Evidence

recent repository activity
install command or GitHub repo available
62/100 quality profile
1 OpenAgentSkill engagement events

review first

Low GitHub adoption signal

Implementation path

1Install it in a sandbox agent and run one Document processing task end to end.
2Compare output quality, latency, and failure behavior against at least one alternative.
3Promote it into production only after reviewing repository permissions, license, and maintenance signals.

Trust profile

Sandbox only

Useful candidate with missing or mixed trust signals. Keep it in an isolated workspace until the outcome loop proves task fit.

OpenAgentSkill Trust Score

GitHub adoption

CHECK

37 GitHub stars

Stars/forks activity

CHECK

37 stars, 2 forks; issue activity unavailable in current metadata

Recent maintenance

PASS

Pushed today

License clarity

PASS

MIT

Good signals

AI review approved
Install path is available
Repository evidence is available
Recently maintained repository
Install command has no obvious high-risk pattern
Outcome loop is ready but needs first real agent run

Review before install

Low GitHub adoption signal
Quality score needs review
GitHub adoption: 37 GitHub stars
Stars/forks activity: 37 stars, 2 forks; issue activity unavailable in current metadata
No real agent outcome reports yet
Human review required before unattended installation

Recommended action

Run only in a sandbox and compare close alternatives before using it for real work.

Quality profile

Promising candidate for agent workflows

Useful candidate, but compare it with alternatives before adopting.

GitHub stars

Freshness

Today

Install ready

Yes

License

MIT

Review before install: Low GitHub adoption signal

Workflow fit

Use this skill in these scenarios

Parse messy files

Document processing

I need my agent to read PDFs, extract tables, and turn documents into structured data.

Search private knowledge

RAG and knowledge

I need my agent to build a RAG workflow over documents and retrieve reliable context.

Operate web apps

Browser automation

I need my agent to control a browser, fill forms, and verify web app workflows.

Workflow fit

Add it to a complete workflow

Turn skills into distribution

Content growth agent

A workflow for turning newly indexed skills into SEO briefs, social drafts, comparison pages, and reusable publishing workflows.

Ingest, retrieve, and cite

RAG knowledge base

A workflow for document-heavy agents that ingest files, create searchable knowledge, retrieve relevant context, and answer with grounded sources.

Operate and verify web apps

Browser QA agent

A workflow for agents that navigate products, fill forms, take screenshots, and verify real user flows across web applications.

Alternative shortlist

Compare before you install

Similar skills that may fit this task.

Compare all

Wazuh

Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.

Maigret

🕵️‍♂️ Collect a dossier on a person by username from 3000+ sites

Nuclei

Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the internet. It helps you find vulnerabilities in your applications, APIs, networks, DNS, and cloud configurations.

Infisical

Infisical is the open-source platform for secrets, certificates, and privileged access management.

Overview

--- name: audit-risk-assessment description: "基于 ISA 315 (Revised 2019) 框架执行审计计划阶段的风险评估。当用户需要 (1) 制定审计计划 (2) 识别重大错报风险 (3) 评估内部控制 (4) 确定重要性水平 (5) 设计审计策略时使用。输出结构化风险评估文档。" ---

# 审计计划与风险评估

基于国际审计准则 ISA 315 (Revised 2019) 框架，执行审计计划阶段的系统性风险评估。

## When To Use

- 用户需要为客户制定审计计划 - 用户需要识别和评估重大错报风险（RMM） - 用户需要了解被审计单位的内部控制 - 用户需要确定重要性水平 - 用户需要设计审计策略和审计程序的总体方向

## Tools

| Tool | Purpose | |------|---------| | `update_project_markdown_document` | 保存风险评估文档到项目空间 | | `write_project_office_document` | 生成风险评估报告（Word/PDF） |

## Framework: ISA 315 (Revised 2019)

### 核心概念

- **固有风险 (Inherent Risk, IR)**：在考虑相关控制之前，某项认定存在重大错报的可能性。ISA 315 要求在认定层面评估固有风险。 - **控制风险 (Control Risk, CR)**：某项重大错报未被实体的内部控制及时防止或发现并纠正的可能性。 - **检查风险 (Detection Risk, DR)**：审计师的程序未能发现存在的重大错报的风险。审计师的责任是控制检查风险。 - **重大错报风险 (Risk of Material Misstatement, RMM)**：固有风险与控制风险的组合。RMM = IR × CR。 - **重大账户 (Significant Accounts)**：存在合理可能性包含重大错报的账户。 - **认定 (Assertions)**：存在/发生、完整性、计价/分摊、权利和义务、列报和披露。

### 五步风险评估流程

#### Step 1：了解被审计单位及其环境

| 维度 | 了解内容 | |------|---------| | 行业因素 | 行业竞争格局、监管要求、技术变革、市场趋势 | | 所有权与治理 | 股权结构、董事会构成、管理层激励机制 | | 经营模式 | 主要业务流程、收入来源、成本结构、关键资产 | | 会计政策 | 重大会计估计、会计政策变更、复杂交易处理 | | 财务业绩 | 收入增长率、毛利率趋势、现金流与利润匹配度 |

#### Step 2：了解内部控制（COSO 五要素）

| 要素 | 关键问题 | |------|---------| | 控制环境 | 管理层诚信度、治理监督、权责分配、员工胜任能力 | | 风险评估过程 | 管理层如何识别和应对经营风险 | | 信息系统与沟通 | 财务报告相关的信息系统、内部控制沟通机制 | | 控制活动 | 审批授权、核对复核、资产保护、职责分离 | | 对控制的监督 | 持续监控、独立评估、缺陷报告机制 |

#### Step 3：识别重大账户、披露和相关认定

对每个账户评估以下风险因素： - 账户规模和构成 - 因错误或舞弊导致错报的敏感性 - 交易量、复杂性和同质性 - 账户性质 - 会计和报告复杂性 - 损失风险 - 重大或有负债的可能性 - 关联方交易的存在 - 与前期的变化

#### Step 4：识别可能的错报来源（WCGW 分析）

对每个重大账户/认定，回答： - **What Could Go Wrong?** 在交易的发起、授权、处理、记录环节中，哪些环节可能出现错报？ - 管理层已实施了哪些控制？ - 需要执行哪些穿行测试？

#### Step 5：评估重大错报风险

- 在认定层面评估每个重大账户的 RMM - 确定哪些风险是**显著风险**（需要特别审计关注） - 识别因舞弊导致的重大错报风险（ISA 240 联动） - 确定显著风险是否需要测试控制

## Workflow

``` 1. 收集 → 获取客户行业、经营、财务、内控基本信息 2. 了解 → 按 Step 1-2 系统了解被审计单位和内控 3. 识别 → 按 Step 3-4 识别重大账户和 WCGW 4. 评估 → 按 Step 5 在认定层面评估 RMM 5. 重要性 → 计算整体重要性和实际执行的重要性 6. 策略 → 基于风险评估设计审计策略 7. 输出 → 生成结构化风险评估文档 ```

## Output Format

```markdown # 审计计划与风险评估报告

## 一、被审计单位概况

| 项目 | 内容 | |------|------| | 客户名称 | [名称] | | 行业 | [行业] | | 审计期间 | [期间] | | 主要业务 | [描述] |

## 二、重要性水平

| 项目 | 金额 | 计算基础 | 比例 | |------|------|---------|------| | 整体重要性 | [金额] | [基准] | [比例] | | 实际执行的重要性 | [金额] | [整体重要性] | 50%-75% | | 明显微小错报临界值 | [金额] | — | — |

## 三、重大账户与认定识别

| 科目 | 金额 | 占比 | 相关认定 | 是否重大 | |------|------|------|---------|---------| | 收入 | ... | ... | 发生/完整性/截止 | ✅ | | 应收账款 | ... | ... | 存在/计价 | ✅ | | 存货 | ... | ... | 存在/计价/完整性 | ✅ | | ... | ... | ... | ... | ... |

## 四、内部控制了解与评估

### 4.1 控制环境评价

| 维度 | 评价 | 风险等级 | |------|------|---------| | 管理层诚信 | [描述] | 🟢/🟡/🔴 | | 治理监督 | [描述] | 🟢/🟡/🔴 | | 权责分配 | [描述] | 🟢/🟡/🔴 | | 员工胜任能力 | [描述] | 🟢/🟡/🔴 |

### 4.2 关键业务流程控制

| 流程 | 关键控制点 | 设计评价 | 是否需测试运行有效性 | |------|-----------|---------|-------------------| | 销售到收款 | [控制点] | 有效/缺陷 | 是/否 | | 采购到付款 | [控制点] | 有效/缺陷 | 是/否 | | ... | ... | ... | ... |

## 五、WCGW 分析与风险评估矩阵

| 科目 | 认定 | WCGW（可能的错报） | 固有风险 | 控制风险 | RMM | 是否显著风险 | |------|------|-------------------|---------|---------|-----|------------| | 收入 | 发生 | 虚构销售交易 | 高 | 中 | 高 | ✅ | | 收入 | 截止 | 收入确认时点错误 | 中 | 中 | 中 | ❌ | | 应收账款 | 计价 | 坏账准备计提不足 | 高 | 中 | 高 | ✅ | | 存货 | 存在 | 虚构存货或数量高估 | 中 | 低 | 低 | ❌ | | ... | ... | ... | ... | ... | ... | ... |

## 六、舞弊风险评估

| 舞弊风险 | 驱动因素 | 影响科目 | 应对措施 | |---------|---------|---------|---------| | 收入虚增 | 业绩压力/对赌 | 收入/应收账款 | [措施] | | 费用资本化 | 利润目标 | 固定资产/开发支出 | [措施] | | ... | ... | ... | ... |

## 七、审计策略

| 风险领域 | 审计策略 | 审计程序类型 | 时间安排 | |---------|---------|------------|---------| | 收入确认 | 增加实质性程序 | 细节测试+分析性复核 | 期末+期后 | | 关联方交易 | 扩大测试范围 | 函证+细节测试 | 期末 | | ... | ... | ... | ... |

## 八、未解决事项

| 事项 | 影响 | 待补充资料 | 责任人 | |------|------|-----------|--------| | ... | ... | ... | ... | ```

## Diagnostic Questions

当用户提供的信息不完整时，按以下优先级追问：

1. **行业与监管**: "客户所在行业有哪些特殊的会计处理或监管要求？" 2. **经营模式**: "客户的主要收入来源和商业模式是什么？" 3. **内控环境**: "客户的内控环境如何？是否有已知的内控缺陷？" 4. **历史问题": "上年审计有哪些发现或保留事项？" 5. **管理层关注**: "管理层或治理层特别关注哪些领域？"

## Verification

- [ ] 重要性水平已计算，且基准选择有合理依据 - [ ] 所有重大账户已识别，且认定已映射 - [ ] WCGW 分析覆盖每个重大账户/认定 - [ ] 显著风险已单独标识 - [ ] 舞弊风险已按 ISA 240 要求评估 - [ ] 审计策略与风险评估结果匹配 - [ ] 内部控制五要素均已了解和评价

## Saving

生成风险评估文档后，建议保存： - 作为 Markdown：`update_project_markdown_document` - 作为 Word：`write_project_office_document`（file_type=docx）

## Capability Upgrade

### Mode Selection

- **Quick**: 输出重大错报风险清单和初步审计响应。 - **Standard**: 形成风险评估矩阵、账户认定映射、控制了解和审计策略。 - **Deep**: 结合行业、财务波动、前期错报、舞弊风险、IT 环境和控制测试计划，形成完整计划阶段底稿。

### Assertion Mapping Model

每项风险必须映射到财务报表项目和认定：存在、完整性、准确性、截止、计价、权利义务、列报。没有认定映射的风险不能直接转化为审计程序。

### Quality Gates

- [ ] 风险来源包含行业、企业、账户、交易和舞弊维度。 - [ ] 每项重大风险都有认定、理由、证据和响应。 - [ ] 高风险账户与实质性程序设计相衔接。 - [ ] 内控了解结论没有被误写成控制有效性结论。 - [ ] 数据缺口和管理层假设已单独披露。

### Deliverable Catalog

| Deliverable | When to use | Minimum content | Format | |-------------|-------------|-----------------|--------| | Risk assessment memo | 审计计划阶段 | 行业风险、企业风险、账户风险、舞弊风险和审计响应 | Word / Markdown | | Risk and assertion matrix | 设计审计程序前 | 风险、账户、认定、固有风险、控制风险、响应程序 | Excel | | Fraud risk assessment | 必须评估舞弊风险 | 压力、机会、合理化、红旗信号和应对程序 | Markdown / Excel | | Internal control understanding note | 了解内控 | 流程、控制点、设计评价、资料来源和缺口 | Word | | Planning meeting pack | 项目组计划会 | 关键风险、重大性、审计策略、资源和时间安排 | PPT | | Data request list | 信息缺口明显 | 财务、流程、合同、系统、访谈和管理层说明清单 | Markdown / Excel |

Technical details

Version: 1.0.0
License: MIT
Last updated: Aug 24, 2026
Published: Aug 24, 2026

Decision snapshot

Fallback candidate

Ready

Prototype

Stage

recent repository activity

Audit

Install review

Install and adoption review

Needs review

Security: 86/100
Maintenance: 100/100
Install: 92/100

Open full audit View eval report

Agent-proven evidence

Outcome reports after resolve, review, install, and one narrow run.

Proven

Needs first agent runAuto-install: review firstLast: Unknown

Success rate: —
Recent failure: —
Outcomes: 0
Output quality: —
Failed: 0
Not relevant: 0
Installs: 0
Risk blocked: 0
Setup needed: 0
Production: 0

No agent outcome data yet. The first agent run can report success, setup needs, risk blocks, failure, or not-relevant through /api/agent/outcome.

Agent-Proven ranking Outcome contract

Install

Add to agent workflow

Free and open source. Review the report before installing into production agents.

Compare Alternatives Auto-resolve Plan View on GitHub Documentation

Growth loop

Share kit

Scenario-led draft for audit-risk-assessment, ready for a manual X post.

Curator note

audit-risk-assessment: 基于 ISA 315 (Revised 2019) 框架执行审计计划阶段的风险评估。当用户需要 (1) 制定审计计划 (2) 识别重大错报风险 (3) 评估内部控制 (4) 确定重要性水...

37 stars

https://www.openagentskill.com/skills/guoliang1114-boop-audit-risk-assessment?ref=x

Open X draft

Optional reply with install command

Listing + install path for audit-risk-assessment:
https://www.openagentskill.com/skills/guoliang1114-boop-audit-risk-assessment?ref=x

Install: npx skills add guoliang1114-boop/AriaAI --skill audit-risk-assessment

Open reply draft

Listing source

Registry indexed

Claimable

This listing was indexed from public sources and is not marked official until a maintainer claim is approved.

Creator: guoliang1114-boop
Source: guoliang1114-boop/AriaAI
Indexed by: OpenAgentSkill community index

Attribution links to the public repository or creator profile. Creators can claim the listing to update ownership signals.

Claim this skill

Owner claim

Claim this skill listing

This Registry indexed listing is attributed to guoliang1114-boop but is not marked official yet. Claim it to add a verified owner signal and make future launch, install, and audit updates easier to trust.

Creator backlink kit

Add the evidence badges to your README

Show the canonical listing, current trust and audit signals, and real Agent-Proven evidence where developers evaluate the repository.

[![Listed on OpenAgentSkill](https://www.openagentskill.com/api/badge/guoliang1114-boop-audit-risk-assessment?metric=listed&label=Listed)](https://www.openagentskill.com/skills/guoliang1114-boop-audit-risk-assessment)
[![OpenAgentSkill Trust](https://www.openagentskill.com/api/badge/guoliang1114-boop-audit-risk-assessment?metric=trust&label=Trust)](https://www.openagentskill.com/skills/guoliang1114-boop-audit-risk-assessment)
[![OpenAgentSkill Audit](https://www.openagentskill.com/api/badge/guoliang1114-boop-audit-risk-assessment?metric=audit&label=Audit)](https://www.openagentskill.com/skills/guoliang1114-boop-audit-risk-assessment/audit)
[![Agent Proven](https://www.openagentskill.com/api/badge/guoliang1114-boop-audit-risk-assessment?metric=proven&label=Agent%20Proven)](https://www.openagentskill.com/skills/guoliang1114-boop-audit-risk-assessment)

Preview badge Open audit Creator kit

Author

guoliang1114-boop

@guoliang1114-boop

Platform fit

Claude Code

Health signals

GitHub stars: 37
Quality score: 34/100
Last GitHub push: Aug 24, 2026
Framework hints: Unknown
OpenAgentSkill views: 1
Install copies: 0
Outbound clicks: 0

Community signal

Share whether this skill looks useful for your agent workflow. Aggregated feedback improves rankings over time.

Trust & safety

Sandbox only

GitHub adoption37 GitHub starsCHECK
Stars/forks activity37 stars, 2 forks; issue activity unavailable in current metadataCHECK
Recent maintenancePushed todayPASS
License clarityMITPASS
README/SKILL.md completenessPublic metadata needs stronger README/SKILL.md contextINFO
Dependency/runtime riskno major dependency risk hints in public metadataPASS

Related skills

Wazuh

Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.

16.3K Stars

Maigret

🕵️‍♂️ Collect a dossier on a person by username from 3000+ sites

32.9K Stars

Nuclei

29.2K Stars

Infisical

Infisical is the open-source platform for secrets, certificates, and privileged access management.

27.4K Stars

Install View on GitHub

@guoliang1114-boop

Creator · guoliang1114-boop

Last updated · Aug 24, 2026

audit-risk-assessment

REVIEW · 69Registry indexed

agent-skill

OpenAgentSkill Trust Score

69/100

Sandbox only

Quality62/100

Audit79/100

Stars37

Verified installs0

View on GitHub Open full audit README badge Claim this skill

Install targets

Codex install prompt

Install the "audit-risk-assessment" agent skill from https://github.com/guoliang1114-boop/AriaAI/tree/main/skills/audit-risk-assessment. Read its SKILL.md or equivalent instructions first, install only the files needed for this workspace, and summarize any required setup before using it. Skill purpose: 基于 ISA 315 (Revised 2019) 框架执行审计计划阶段的风险评估。当用户需要 (1) 制定审计计划 (2) 识别重大错报风险 (3) 评估内部控制 (4) 确定重要性水平 (5) 设计审计策略 时使用。输出结构化风险评估文档。 After the install attempt, report the result to https://www.openagentskill.com/api/agent/outcome with POST JSON {"event_id":"install_<unique-id>","skill_slug":"guoliang1114-boop-audit-risk-assessment","task":"Install audit-risk-assessment","agent":"codex","outcome":"success","install_used":true}. Replace event_id with a unique value and outcome with success or failed. Report success only after the skill is installed and a minimal verification passes.

Supply asset profile

Research and knowledge work

Deep research, source comparison, literature review, RAG, knowledge search, and reports.

Browse track

Scenario

Document processing

I need my agent to read PDFs, extract tables, and turn documents into structured data.

Agent fit

Claude Code + CLI + Codex

Codex, Claude Code, Cursor, CLI, or custom agents.

Install

Ready

npx skills add guoliang1114-boop/AriaAI --skill audit-risk-assessment

Maintenance

fresh

Pushed today

Risk

Needs review

Low GitHub adoption signal

GitHub quality

62/100 Quality · 77/100 Trust

Coverage tags

ResearchDocument processingsecurityagent-skill

Review notes

Low GitHub adoption signal · Quality score needs review

Agent adoption scorecard

Trust, audit, and install readiness at a glance

These scores combine public repository metadata, OpenAgentSkill review signals, maintenance freshness, and install readiness. They are a shortlist signal, not a replacement for human review.

Quality

Promising

Useful candidate, but compare it with alternatives before adopting.

Trust

Sandbox only

Useful candidate with missing or mixed trust signals. Keep it in an isolated workspace until the outcome loop proves task fit.

Audit

Needs review

A machine-readable review of install readiness, security metadata, maintenance, and adoption risk.

OpenAgentSkill Trust Score v5

Human review before install

Run only in a sandbox and compare close alternatives before using it for real work.

CodexClaude CodeCursorOpenAgentSkill CLI

Stars

37 GitHub stars

Repo activity

37 stars, 2 forks

Maintenance

Pushed today

License

MIT

Install

npx skills add guoliang1114-boop/AriaAI --skill audit-risk-assessment

Install safety

standard package or runtime install path

Permission surface

filesystem or document access

Agent outcomes

No agent outcome data yet

Docs

Usable metadata, review docs

Risk summary

Review before production

Low GitHub adoption signal
Quality score needs review
GitHub adoption: 37 GitHub stars
Stars/forks activity: 37 stars, 2 forks; issue activity unavailable in current metadata

Install readiness

Install path available

Install path is available
Repository evidence is available
License is declared
No Agent Proven outcome evidence yet

Agent-readable metadata

Machine-readable decision data for this skill.

Use this block or the embedded JSON to decide whether an agent should install this skill, choose an alternative, or ask for human review first.

View technical data+

Open JSON

Suited tasks

Document processing workflows
Claude Code teams
builders willing to evaluate younger projects
Read uploaded files

Suited agents

CodexClaude CodeCursorOpenAgentSkill CLICLI

Install decision

Command: npx skills add guoliang1114-boop/AriaAI --skill audit-risk-assessment
Policy: review
Human review: yes

Trust and risk

Trust: 69/100
Audit: 79/100
Risk level: Needs review

Outcome loop

Endpoint: /api/agent/outcome
Event ID: resolve
Outcomes: 5

Install command

npx skills add guoliang1114-boop/AriaAI --skill audit-risk-assessment

Public audit Eval report Resolve API Install handoff

Do not use when

teams that need a vendor-supported SLA
production agents without a repository review
Low GitHub adoption signal
Quality score needs review
GitHub adoption: 37 GitHub stars

Alternative

Wazuh

16.3K Stars

npx skills add wazuh/wazuh

Alternative

Maigret

32.9K Stars

npx skills add soxoj/maigret

Alternative

Nuclei

29.2K Stars

npx skills add projectdiscovery/nuclei

Alternative

Infisical

27.4K Stars

npx skills add Infisical/infisical

Agent safety v2

63/100 · Review before install

Reviewed with permission notesreview

Usable candidate, but the agent should surface permission and audit notes before installation.

Require human approval before installing into a real workspace.

Resolve via API

medium

Network access

Skill likely fetches remote pages, APIs, repositories, or external services.

medium

Filesystem access

Skill may read or write project files, documents, generated artifacts, or local workspace state.

Low GitHub adoption signal

Agent resolve plan

Let an agent verify fit before installing.

The Resolve API returns the selected skill, alternatives, safety policy, audit notes, install target, and copy-paste prompt an agent can follow without scraping this page.

Open text plan

Open JSON

/api/agent/resolve?task=Use%20audit-risk-assessment%20for%20an%20agent%20workflow&agent=codex&max_risk=medium

Resolve text

/api/agent/resolve?task=Use%20audit-risk-assessment%20for%20an%20agent%20workflow&agent=codex&max_risk=medium&format=text

Install handoff

/api/skills/guoliang1114-boop-audit-risk-assessment/install

Agent should check

Task fit and alternatives from Resolve API.
Audit score, trust score, and safety policy warnings.
Install target compatibility for Codex, Claude Code, Cursor, or CLI.

Copy prompt

Task: Use audit-risk-assessment in this workspace.
Resolve first: https://www.openagentskill.com/api/agent/resolve?task=Use%20audit-risk-assessment%20for%20an%20agent%20workflow&agent=codex&max_risk=medium
Review install handoff: https://www.openagentskill.com/api/skills/guoliang1114-boop-audit-risk-assessment/install
Install command: npx skills add guoliang1114-boop/AriaAI --skill audit-risk-assessment
Before running it, summarize audit warnings, required permissions, and the fallback skill if install is risky.

Agent handoff

Give an agent the install path, not another directory page.

Use the public install endpoint to fetch the command, safety checklist, target prompts, and canonical links for this skill.

Open install API

Install handoff

/api/skills/guoliang1114-boop-audit-risk-assessment/install

LLM text format

/api/skills/guoliang1114-boop-audit-risk-assessment/install?format=text

Find alternatives

/api/skills/search?q=audit-risk-assessment&limit=3

Agent prompt

Use audit-risk-assessment for this task. Review https://www.openagentskill.com/api/skills/guoliang1114-boop-audit-risk-assessment/install, then install with: npx skills add guoliang1114-boop/AriaAI --skill audit-risk-assessment

Registry metadata

Agent-readable profile for automatic skill selection.

This page exposes the same decision, trust, audit, use-case, and install signals through the Registry API, so agents can rank this skill without scraping the UI.

Open manifest

Manifest

/api/registry/manifest/guoliang1114-boop-audit-risk-assessment

LLM text

/api/registry/manifest/guoliang1114-boop-audit-risk-assessment?format=text

Install alias

/api/registry/install/guoliang1114-boop-audit-risk-assessment

Recommend

/api/registry/recommend?task=Use%20audit-risk-assessment%20in%20an%20agent%20workflow&limit=3

Agent fit

61/100

Document processing

Use-case tags

Document processing RAG and knowledge Browser automation

Platforms

Claude Code

Audit report

Needs review · 79/100

A machine-readable review of install readiness, security metadata, maintenance, and adoption risk.

View audit report View eval report

Agent decision cockpit

Fallback candidate for Document processing

Prototype with this skill first; keep a fallback candidate ready.

Readiness

Prototype

Stage

Role in stack

Fallback candidate

Primary fit

Document processing

Trust label

Prototype first

Install path

Command ready

Use when

Document processing workflows
Claude Code teams
builders willing to evaluate younger projects

Evidence

recent repository activity
install command or GitHub repo available
62/100 quality profile
1 OpenAgentSkill engagement events

review first

Low GitHub adoption signal

Implementation path

1Install it in a sandbox agent and run one Document processing task end to end.
2Compare output quality, latency, and failure behavior against at least one alternative.
3Promote it into production only after reviewing repository permissions, license, and maintenance signals.

Trust profile

Sandbox only

Useful candidate with missing or mixed trust signals. Keep it in an isolated workspace until the outcome loop proves task fit.

OpenAgentSkill Trust Score

GitHub adoption

CHECK

37 GitHub stars

Stars/forks activity

CHECK

37 stars, 2 forks; issue activity unavailable in current metadata

Recent maintenance

PASS

Pushed today

License clarity

PASS

MIT

Good signals

AI review approved
Install path is available
Repository evidence is available
Recently maintained repository
Install command has no obvious high-risk pattern
Outcome loop is ready but needs first real agent run

Review before install

Low GitHub adoption signal
Quality score needs review
GitHub adoption: 37 GitHub stars
Stars/forks activity: 37 stars, 2 forks; issue activity unavailable in current metadata
No real agent outcome reports yet
Human review required before unattended installation

Recommended action

Run only in a sandbox and compare close alternatives before using it for real work.

Quality profile

Promising candidate for agent workflows

Useful candidate, but compare it with alternatives before adopting.

GitHub stars

Freshness

Today

Install ready

Yes

License

MIT

Review before install: Low GitHub adoption signal

Workflow fit

Use this skill in these scenarios

Parse messy files

Document processing

I need my agent to read PDFs, extract tables, and turn documents into structured data.

Search private knowledge

RAG and knowledge

I need my agent to build a RAG workflow over documents and retrieve reliable context.

Operate web apps

Browser automation

I need my agent to control a browser, fill forms, and verify web app workflows.

Workflow fit

Add it to a complete workflow

Turn skills into distribution

Content growth agent

A workflow for turning newly indexed skills into SEO briefs, social drafts, comparison pages, and reusable publishing workflows.

Ingest, retrieve, and cite

RAG knowledge base

A workflow for document-heavy agents that ingest files, create searchable knowledge, retrieve relevant context, and answer with grounded sources.

Operate and verify web apps

Browser QA agent

A workflow for agents that navigate products, fill forms, take screenshots, and verify real user flows across web applications.

Alternative shortlist

Compare before you install

Similar skills that may fit this task.

Compare all

Wazuh

Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.

Maigret

🕵️‍♂️ Collect a dossier on a person by username from 3000+ sites

Nuclei

Infisical

Infisical is the open-source platform for secrets, certificates, and privileged access management.

Overview

# 审计计划与风险评估

基于国际审计准则 ISA 315 (Revised 2019) 框架，执行审计计划阶段的系统性风险评估。

## When To Use

## Tools

| Tool | Purpose | |------|---------| | `update_project_markdown_document` | 保存风险评估文档到项目空间 | | `write_project_office_document` | 生成风险评估报告（Word/PDF） |

## Framework: ISA 315 (Revised 2019)

### 核心概念

### 五步风险评估流程

#### Step 1：了解被审计单位及其环境

#### Step 2：了解内部控制（COSO 五要素）

#### Step 3：识别重大账户、披露和相关认定

#### Step 4：识别可能的错报来源（WCGW 分析）

#### Step 5：评估重大错报风险

## Workflow

## Output Format

```markdown # 审计计划与风险评估报告

## 一、被审计单位概况

| 项目 | 内容 | |------|------| | 客户名称 | [名称] | | 行业 | [行业] | | 审计期间 | [期间] | | 主要业务 | [描述] |

## 二、重要性水平

## 三、重大账户与认定识别

## 四、内部控制了解与评估

### 4.1 控制环境评价

### 4.2 关键业务流程控制

## 五、WCGW 分析与风险评估矩阵

## 六、舞弊风险评估

## 七、审计策略

## 八、未解决事项

| 事项 | 影响 | 待补充资料 | 责任人 | |------|------|-----------|--------| | ... | ... | ... | ... | ```

## Diagnostic Questions

当用户提供的信息不完整时，按以下优先级追问：

## Verification

## Saving

生成风险评估文档后，建议保存： - 作为 Markdown：`update_project_markdown_document` - 作为 Word：`write_project_office_document`（file_type=docx）

## Capability Upgrade

### Mode Selection

### Assertion Mapping Model

每项风险必须映射到财务报表项目和认定：存在、完整性、准确性、截止、计价、权利义务、列报。没有认定映射的风险不能直接转化为审计程序。

### Quality Gates

### Deliverable Catalog

Technical details

Version: 1.0.0
License: MIT
Last updated: Aug 24, 2026
Published: Aug 24, 2026

Decision snapshot

Fallback candidate

Ready

Prototype

Stage

recent repository activity

Audit

Install review

Install and adoption review

Needs review

Security: 86/100
Maintenance: 100/100
Install: 92/100

Open full audit View eval report

Agent-proven evidence

Outcome reports after resolve, review, install, and one narrow run.

Proven

Needs first agent runAuto-install: review firstLast: Unknown

Success rate: —
Recent failure: —
Outcomes: 0
Output quality: —
Failed: 0
Not relevant: 0
Installs: 0
Risk blocked: 0
Setup needed: 0
Production: 0

No agent outcome data yet. The first agent run can report success, setup needs, risk blocks, failure, or not-relevant through /api/agent/outcome.

Agent-Proven ranking Outcome contract

Install

Add to agent workflow

Free and open source. Review the report before installing into production agents.

Compare Alternatives Auto-resolve Plan View on GitHub Documentation

Growth loop

Share kit

Scenario-led draft for audit-risk-assessment, ready for a manual X post.

Curator note

audit-risk-assessment: 基于 ISA 315 (Revised 2019) 框架执行审计计划阶段的风险评估。当用户需要 (1) 制定审计计划 (2) 识别重大错报风险 (3) 评估内部控制 (4) 确定重要性水...

37 stars

https://www.openagentskill.com/skills/guoliang1114-boop-audit-risk-assessment?ref=x

Open X draft

Optional reply with install command

Listing + install path for audit-risk-assessment:
https://www.openagentskill.com/skills/guoliang1114-boop-audit-risk-assessment?ref=x

Install: npx skills add guoliang1114-boop/AriaAI --skill audit-risk-assessment

Open reply draft

Listing source

Registry indexed

Claimable

This listing was indexed from public sources and is not marked official until a maintainer claim is approved.

Creator: guoliang1114-boop
Source: guoliang1114-boop/AriaAI
Indexed by: OpenAgentSkill community index

Attribution links to the public repository or creator profile. Creators can claim the listing to update ownership signals.

Claim this skill

Owner claim

Claim this skill listing

Creator backlink kit

Add the evidence badges to your README

Show the canonical listing, current trust and audit signals, and real Agent-Proven evidence where developers evaluate the repository.

[![Listed on OpenAgentSkill](https://www.openagentskill.com/api/badge/guoliang1114-boop-audit-risk-assessment?metric=listed&label=Listed)](https://www.openagentskill.com/skills/guoliang1114-boop-audit-risk-assessment)
[![OpenAgentSkill Trust](https://www.openagentskill.com/api/badge/guoliang1114-boop-audit-risk-assessment?metric=trust&label=Trust)](https://www.openagentskill.com/skills/guoliang1114-boop-audit-risk-assessment)
[![OpenAgentSkill Audit](https://www.openagentskill.com/api/badge/guoliang1114-boop-audit-risk-assessment?metric=audit&label=Audit)](https://www.openagentskill.com/skills/guoliang1114-boop-audit-risk-assessment/audit)
[![Agent Proven](https://www.openagentskill.com/api/badge/guoliang1114-boop-audit-risk-assessment?metric=proven&label=Agent%20Proven)](https://www.openagentskill.com/skills/guoliang1114-boop-audit-risk-assessment)

Preview badge Open audit Creator kit

Author

guoliang1114-boop

@guoliang1114-boop

Platform fit

Claude Code

Health signals

GitHub stars: 37
Quality score: 34/100
Last GitHub push: Aug 24, 2026
Framework hints: Unknown
OpenAgentSkill views: 1
Install copies: 0
Outbound clicks: 0

Community signal

Share whether this skill looks useful for your agent workflow. Aggregated feedback improves rankings over time.

Trust & safety

Sandbox only

GitHub adoption37 GitHub starsCHECK
Stars/forks activity37 stars, 2 forks; issue activity unavailable in current metadataCHECK
Recent maintenancePushed todayPASS
License clarityMITPASS
README/SKILL.md completenessPublic metadata needs stronger README/SKILL.md contextINFO
Dependency/runtime riskno major dependency risk hints in public metadataPASS

Related skills

Wazuh

Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.

16.3K Stars

Maigret

🕵️‍♂️ Collect a dossier on a person by username from 3000+ sites

32.9K Stars

Nuclei

29.2K Stars

Infisical

Infisical is the open-source platform for secrets, certificates, and privileged access management.

27.4K Stars

Install View on GitHub

audit-risk-assessment

Research and knowledge work

Trust, audit, and install readiness at a glance

Human review before install

Review before production

Install path available

Machine-readable decision data for this skill.

Wazuh

Maigret

Nuclei

Infisical

63/100 · Review before install

Network access

Filesystem access

Let an agent verify fit before installing.

Give an agent the install path, not another directory page.

Agent-readable profile for automatic skill selection.

Needs review · 79/100

Fallback candidate for Document processing

Sandbox only

Promising candidate for agent workflows

Use this skill in these scenarios

Document processing

RAG and knowledge

Browser automation

Add it to a complete workflow

Content growth agent

RAG knowledge base

Browser QA agent

Compare before you install

Wazuh

Maigret

Nuclei

Infisical

Overview

Technical details

Fallback candidate

Install review

Agent-proven evidence

Add to agent workflow

Share kit

Registry indexed

Claim this skill listing

Add the evidence badges to your README

Author

Tags

Platform fit

Health signals

Community signal

Trust & safety

Related skills

audit-risk-assessment

Research and knowledge work

Trust, audit, and install readiness at a glance

Human review before install

Review before production

Install path available

Machine-readable decision data for this skill.

Wazuh

Maigret

Nuclei

Infisical

63/100 · Review before install

Network access

Filesystem access

Let an agent verify fit before installing.

Give an agent the install path, not another directory page.

Agent-readable profile for automatic skill selection.

Needs review · 79/100

Fallback candidate for Document processing

Sandbox only

Promising candidate for agent workflows

Use this skill in these scenarios

Document processing

RAG and knowledge

Browser automation

Add it to a complete workflow

Content growth agent

RAG knowledge base

Browser QA agent