Risk Register

For changes that touch sensitive areas (authentication, data, migrations, infrastructure), document the risks explicitly. This is what senior developers do naturally - making it explicit ensures nothing is overlooked.

When to Use

Use this skill when your change involves:

• Authentication/Authorization - Login, sessions, permissions, tokens
• User Data - PII, passwords, payment info, user content
• Data Migrations - Schema changes, data transformations, backfills
• External Integrations - Third-party APIs, webhooks, OAuth
• Infrastructure - Deployment, scaling, configuration changes
• Breaking Changes - API changes, behavioral changes, deprecations

Quick Start