feature-flag-risk-assessor

When to invoke

• You have a feature-flag export (JSON) and want to identify operational and release risks.
• You want to standardize flag hygiene checks during releases.

Inputs needed

• --input path to a JSON file containing feature flags.
  • Expected shape: { "flags": [ {"key": "...", "created_at": "YYYY-MM-DD", "updated_at": "YYYY-MM-DD", "enabled": true/false, "rules": [...] } ] }

Workflow

1. Validate the flag schema and required fields.
2. Compute risk signals:
   • stale flags (no updates beyond threshold)
   • enabled flags older than threshold
   • flags without a documented owner
   • rule conflicts (duplicate segments with different rollouts)
   • missing kill-switch (no global off / override rule)
3. Emit a JSON report with per-flag risk score and suggested actions.