Install
$ agentstack add skill-qa-aman-claude-skills-impact-assessment ✓ scanned · ✓ verified — works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
About
Overview
Based on The Business Analysis Handbook by Helen Winter - the Impact Mapping framework (Goal to Actors to Impacts to Deliverables) that connects every change to measurable outcomes. Also draws on Requirements Engineering by Hull, Jackson, and Dick for Change Impact Analysis methodology, and Business Process Change by Paul Harmon for process change impact assessment across Rummler-Brache's 3 levels. The key insight from Winter: impact assessment is not about listing what changes. It is about tracing the chain from a proposed change through every actor it touches, every process it disrupts, and every system it modifies - then quantifying the disruption.
Workflow
Step 1: Define the proposed change
CHANGE: [What is being proposed]
TRIGGER: [Why this change is happening - business driver, regulation, incident]
SCOPE: [What areas, systems, or processes are affected]
TIMELINE: [When the change will occur]
Step 2: Build the Impact Map (Winter's framework)
Trace the chain:
GOAL: [Business objective this change serves]
|
--> ACTOR: [Who is affected?]
|
--> IMPACT: [How does this change their work?]
|
--> DELIVERABLE: [What must be built/changed to enable this?]
Example:
GOAL: Reduce order processing time by 50%
--> ACTOR: Warehouse staff
--> IMPACT: Manual pick list replaced by automated routing
--> DELIVERABLE: Warehouse management system integration
--> ACTOR: Customer service team
--> IMPACT: Fewer "where is my order" calls
--> DELIVERABLE: Real-time tracking dashboard
Step 3: Assess impact across 4 dimensions
For each affected area:
| Dimension | Questions to Answer | |-----------|-------------------| | People | Who needs retraining? New roles created/eliminated? Resistance expected? | | Process | Which processes change? New handoffs? Steps added/removed? | | Technology | Which systems modified? Integrations affected? Data migration needed? | | Policy | Which policies need updating? Compliance implications? Approval changes? |
Step 4: Score impact severity
For each impact:
| Impact | Severity | Likelihood | Score | Mitigation |
|--------|----------|------------|-------|------------|
| [description] | High/Med/Low | High/Med/Low | [SxL] | [action to reduce] |
Severity scale:
- High: Stops work, regulatory risk, data loss, or affects > 50% of users
- Medium: Degrades performance, requires workaround, affects 10-50% of users
- Low: Minor inconvenience, affects Actors -> Impacts -> Deliverables)
3. 4-Dimension Impact Table (People, Process, Technology, Policy)
4. Severity Scoring and Mitigation
5. Dependency Map
6. Change Readiness Assessment
7. Recommended Sequencing
## Anti-Patterns
**1. Only assessing technology impact**
Bad: "We need to update the database schema and deploy a new API endpoint."
Good: Also assess: who needs retraining, which processes change, which policies need updating.
**2. Impact without severity scoring**
Bad: A flat list of 20 impacts with no ranking.
Good: Each impact scored by severity x likelihood; high-score items get mitigation plans.
**3. Missing downstream effects**
Bad: Assessing only the team making the change.
Good: Trace through Impact Map to find second and third-order effects on downstream actors.
**4. No change readiness assessment**
Bad: Assuming people will adopt the change because it was communicated.
Good: Assess awareness, desire, knowledge, ability, and reinforcement for each affected group.
## Quality Checklist
- [ ] Change definition includes trigger, scope, and timeline
- [ ] Impact Map traces Goal to Actors to Impacts to Deliverables
- [ ] All 4 dimensions assessed (People, Process, Technology, Policy)
- [ ] Each impact scored by severity and likelihood
- [ ] High-severity impacts have mitigation plans
- [ ] Dependencies mapped with critical path identified
- [ ] Change readiness assessed for each affected group
- [ ] Recommended sequencing accounts for dependencies and readiness
## Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- **Author:** [qa-aman](https://github.com/qa-aman)
- **Source:** [qa-aman/claude-skills](https://github.com/qa-aman/claude-skills)
- **License:** MIT
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet — be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.