# Ultra Risk Vetting

> Risk classification and approval gating for Codex Ultra vNext. Use before external tools, unfamiliar skills, destructive commands, broad write scopes, credential access, network operations, repository publishing, or any action where safety, reversibility, user approval, or audit evidence matters.

- **Type:** Skill
- **Install:** `agentstack add skill-keithhegit-ultra-orchestration-ultra-risk-vetting`
- **Verified:** Yes — security-reviewed for prompt injection and unsafe behavior
- **Seller:** [keithhegit](https://agentstack.voostack.com/s/keithhegit)
- **Installs:** 0
- **Category:** [Security](https://agentstack.voostack.com/c/security)
- **Latest version:** 0.1.0
- **License:** Apache-2.0
- **Upstream author:** [keithhegit](https://github.com/keithhegit)
- **Source:** https://github.com/keithhegit/ultra-orchestration/tree/main/skills-vnext/ultra-risk-vetting
- **Website:** https://keithhegit.github.io/ultra-orchestration/docs.html

## Install

```sh
agentstack add skill-keithhegit-ultra-orchestration-ultra-risk-vetting
```

Requires the [AgentStack CLI](https://agentstack.voostack.com/docs/cli). Works with Claude Code, Cursor, and any MCP-compatible agent.

## About

# Ultra Risk Vetting

Classify risk before execution. This skill is the vNext replacement for the
stable `risk-vetter` skill and absorbs the approval-facing part of
`safety-guard`.

## Risk Levels

Use four levels:

- `LOW`
  safe, local, reversible, narrow-scope work
- `MEDIUM`
  normal engineering work with bounded writes or commands
- `HIGH`
  broad writes, destructive operations, publishing, credentials, or external
  systems
- `EXTREME`
  irreversible, secret-exposing, production-impacting, legal, financial, or
  security-sensitive actions

## Gate Rules

- `LOW`: proceed and log briefly
- `MEDIUM`: proceed with guardrails and evidence capture
- `HIGH`: stop for explicit user approval unless the user already gave concrete
  approval for the exact action
- `EXTREME`: block by default and ask for explicit approval plus scope
  confirmation

## Vetting Checklist

Before execution, inspect:

- reversibility
- write scope
- command destructiveness
- external network or system effects
- credential or secret exposure
- production or user data impact
- whether the action changes published state
- whether the action can be safely retried

## Output

Return a `VetterDecision`:

- `risk_level`
- `decision`
- `required_guardrails`
- `approval_required`
- `evidence_to_capture`
- `reasoning_summary`
- `residual_risk`

Record the decision in `vetter_report` and hand required guardrails to
`ultra-execution-control`.

Read [risk-policy](references/risk-policy.md) for examples and thresholds.

## Source & license

This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.

- **Author:** [keithhegit](https://github.com/keithhegit)
- **Source:** [keithhegit/ultra-orchestration](https://github.com/keithhegit/ultra-orchestration)
- **License:** Apache-2.0
- **Homepage:** https://keithhegit.github.io/ultra-orchestration/docs.html

Install and usage instructions live in the source repository linked above.

## Pricing

- **Free** — Free

## Security capabilities

Automated source analysis of v0.1.0 — what this tool can access:

- **Network access:** no
- **Filesystem access:** no
- **Shell / process execution:** no
- **Environment & secrets:** no
- **Dynamic code execution:** no

*"Yes" means the capability is present in the source — more access means more to trust, not that it is unsafe.*


## Versions

- **0.1.0** — security scan: passed — Imported from the upstream source.

## Links

- Listing page: https://agentstack.voostack.com/l/skill-keithhegit-ultra-orchestration-ultra-risk-vetting
- Seller: https://agentstack.voostack.com/s/keithhegit
- Browse the marketplace: https://agentstack.voostack.com/browse

---
Listed on AgentStack — the marketplace for AI agent skills and MCP servers. Every listing is security-reviewed. Creators keep 70%.