MR
Mayur Rathi
@github
⭐ 34.1k GitHub stars

Impediment-Prioritization

Impediment-Prioritization是一款security方向的AI技能,核心价值是Ranks any list of impediments and their countermeasures using a value-stream scoring model (ROI, Cost to Implement, Ease of Deployment, Risk Factor) and a fixed prioritization formula,可用于解决开发者在security领域的实际问题,帮助用户提升效率、自动化重复任务或优化工作流。

Ranks any list of impediments and their countermeasures using a value-stream scoring model (ROI, Cost to Implement, Ease of Deployment, Risk Factor) and a fixed prioritization formula. Use when someon

Last verified on: 2026-05-30
mkdir -p ./skills/impediment-prioritization && curl -sfL https://raw.githubusercontent.com/github/awesome-copilot/main/skills/impediment-prioritization/SKILL.md -o ./skills/impediment-prioritization/SKILL.md

Run in terminal / PowerShell. Requires curl (Unix) or PowerShell 5+ (Windows).

Skill Content

# Impediment Prioritization Skill


A domain-agnostic skill for ranking impediments and their countermeasures. Works with any `{impediment, countermeasure}` list — GHQR findings, audit results, retro action items, risk registers, architecture review gaps, etc.


When to Activate


Activate when the user:

- Asks to prioritize, rank, sequence, or triage impediments, gaps, risks, findings, or remediation items

- Provides a list of impediments with proposed countermeasures (or asks you to propose countermeasures for a list of problems)

- Asks "what should we fix first" on any improvement / remediation backlog

- Mentions value-stream prioritization, A3 countermeasures, ROI-vs-effort, or lean impediment ranking


Inputs


Accepted input: a list of `{impediment, countermeasure}` pairs. Sources include (non-exhaustive):


| Source | Maps to Impediment | Maps to Countermeasure |

|--------|---------------------|-------------------------|

| GHQR / health-check findings | Finding or gap (Status ≠ Expected) | Recommendation / expected value |

| Audit results | Non-conformance | Remediation action |

| Retrospective | "What went wrong" item | Agreed improvement |

| Risk register | Risk | Mitigation |

| Architecture review | Gap vs. target state | Proposed change |

| User free-form list | Problem statement | Proposed fix |


**Rules:**

- One countermeasure per impediment. If the input suggests multiple remediation paths, select the primary one and note alternatives in the rationale — do not emit multiple rows for the same impediment.

- Collapse duplicates before scoring.

- If a source link / citation is available, attach it to the countermeasure.

- If a confidence level is available on the source, surface it as an optional `Confidence` column.


Scoring Rubric (1–10 scales)


Score each impediment's countermeasure against all four criteria. See [references/scoring-rubric.md](./references/scoring-rubric.md) for anchoring examples at the 1 / 5 / 10 levels across multiple domains (platform engineering, security, SRE, application development, governance).


| Criterion | Scale | Definition |

|-----------|-------|------------|

| **Return on Investment (ROI)** | 1 = low, 10 = high | Efficiency gain delivered by the countermeasure to this step AND to the overall value stream. Not purely financial — weight throughput, cycle-time reduction, defect removal, user / developer experience, and compliance lift. |

| **Cost to Implement** | 1 = inexpensive, 10 = very expensive | Human capital (salary + time of people needed) plus any purchases, licenses, or infrastructure required to implement the countermeasure. |

| **Ease of Deployment** | 1 = extremely hard, 10 = very easy | Remediation effort required to actually deploy the countermeasure end-to-end. Reflects technical complexity, change-management burden, and rollback risk. |

| **Risk Factor** | 1 = low risk, 10 = very high risk | Risk weighted on impact to the overall value stream if the countermeasure goes wrong, stalls, or is deferred. |


Every score must be accompanied by a one-line rationale. When a score is an estimate rather than drawn from explicit data, mark the rationale with `(estimated)`.


Formula


text
Priority = ((ROI * (10 / Cost)) + (Ease * (10 / Risk))) / 2

- Theoretical range: **1 → 100**. Practical range on typical backlogs: ~1 → 100.

- The scale minimum of `1` guarantees Cost and Risk are never zero (no divide-by-zero).

- Higher Priority = do first.

- Boundary checks:

- ROI=10, Cost=1, Ease=10, Risk=1 → `((10*10)+(10*10))/2 = 100`

- ROI=1, Cost=10, Ease=1, Risk=10 → `((1*1)+(1*1))/2 = 1`


Use the formula verbatim. Do not reweight, normalize, or substitute.


Method (agent procedure)


1. **Ingest** the impediment list. Confirm 1:1 impediment-to-countermeasure mapping; collapse duplicates.

2. **Confirm the countermeasure** for each impediment. Prefer documented best practice for the domain. Cite a public / authoritative link when one is available.

3. **Score** all four crite

🎯 Best For

  • Claude users
  • GitHub Copilot users
  • AI users

💡 Use Cases

  • Using Impediment-Prioritization in daily workflow
  • Automating repetitive security tasks

📖 How to Use This Skill

  1. 1

    Install the Skill

    Copy the install command from the Terminal tab and run it. The SKILL.md file downloads to your local skills directory.

  2. 2

    Load into Your AI Assistant

    Open Claude or GitHub Copilot and reference the skill. Paste the SKILL.md content or use the system prompt tab.

  3. 3

    Apply Impediment-Prioritization to Your Work

    Provide context for your task — paste source material, describe your audience, or share existing work to guide the AI.

  4. 4

    Review and Refine

    Edit the AI output for accuracy, tone, and completeness. Add human insight where the AI lacks context.

❓ Frequently Asked Questions

How do I install Impediment-Prioritization?

Copy the install command from the Terminal tab and run it. The skill downloads to ./skills/impediment-prioritization/SKILL.md, ready to use.

Can I customize this skill for my team?

Absolutely. Edit the SKILL.md file to add team-specific instructions, examples, or workflows.

⚠️ Common Mistakes to Avoid

Not reading the full skill

Skills contain important context and edge cases beyond the quick start.

🔗 Related Skills