Works with the AI tools you already use
Ransomware Readiness Assessment
Structured ransomware risk assessment generating weighted maturity scores and a phased hardening roadmap.
$4.99
Ransomware Readiness Assessment
Example session with this skill installed
Run a ransomware readiness assessment for Acme Corp. Start with the Identity and Remote Access domains.
- Read your context and instructions
- Compiled the ransomware readiness assessment
- Generated the data export
I will now begin the Ransomware Readiness Assessment for Acme Corp, focusing on Identity and Remote Access. I have initialized the tracking CSV and will present the high-weight questions first.
Identity & Remote Access Assessment
| Control ID | Security Control | Requirement | Response | Weight |
|---|---|---|---|---|
| ID-01 | Multi-Factor Authentication | MFA is enforced for all remote access (VPN, VDI, SSH). | Yes | 3 |
| ID-02 | Privileged Access Management | Administrative tasks require separate, non-email accounts. | Partial | 3 |
| RA-01 | RDP Exposure | RDP is not accessible directly from the public internet. | No | 3 |
| RA-02 | Session Timeouts | Remote sessions automatically terminate after 60 mins of inactivity. | Yes | 1 |
Initial Maturity Score: 58% (Identity & Remote Access)
Critical Gaps Identified:
1.
Public RDP Exposure: Internet-facing RDP is a primary entry vector for ransomware. Immediate closure or VPN encapsulation is required.
2.
Lack of Tiered Administration: Using standard accounts for admin tasks allows for credential harvesting and lateral movement.
Next steps
- Complete the remaining 8 domains to generate the full weighted maturity report.
- Run
python3 scripts/rr_assess.py score rr_answers.csvto generate the 30/60/90-day roadmap. - Review the RA-01 remediation steps to disable public-facing RDP immediately.
rr_answers.csv
CSV · data export
Example file from a real run - the skill writes it into your workspace.
Connects securely to your tools. The creator never sees your data.
About this skill
Ransomware attacks exploit predictable gaps in identity, backups, and network visibility. This skill provides a structured framework to audit these vulnerabilities and generate a prioritized hardening roadmap based on real-world attack patterns.
What it does
- Structured auditing provides a 60-question assessment covering identity, remote access, backups, and governance.
- Weighted scoring calculates risk based on how often specific gaps appear in active ransomware intrusions.
- Maturity mapping delivers percentage-based scores across ten security domains aligned to NIST CSF and CISA guidance.
- Roadmap generation produces a phased 30/60/90-day remediation plan focused on high-impact gaps.
How it works
- Initialize assessment to generate the standard questionnaire template or start a conversational audit.
- Collect evidence by marking controls as yes, partial, no, or not applicable with supporting notes.
- Analyze results using the scoring script to calculate domain-specific and overall maturity percentages.
- Export reports to Markdown to view prioritized gaps and the structured hardening roadmap.
Frameworks & tools
The skill utilizes Python scripts for template generation and scoring. It aligns with CISA #StopRansomware guidance, CIS Controls, and NIST CSF standards.
Why this beats prompting it yourself
Generic prompts often miss the technical weighting required to prioritize MFA and immutable backups over lower-impact policy gaps. This tool uses a weighted algorithm to ensure the 30-day roadmap addresses the most likely attack vectors first.
Use cases
- Insurance readiness to prepare for cyber insurance renewals and policy requirements.
- Executive reporting to provide leadership with a clear percentage-based maturity score.
- Annual audits to track defensive improvements over time against NIST and CIS standards.
Known limitations
Requires Python 3 for the local scoring script. Results depend on accurate self-reporting of control implementations.
How to use
Skills on Agensi run inside your AI agent. Copy the prompt, paste it into your agent, and it connects to Agensi and installs this skill for you. If a payment is needed, your agent shows it to you first.
Reviews
No reviews yet
Be one of the first to try it. Every listed skill passes our trust checks below.
Security scanned
Passed our 8-point scan before listing
Fresh listing
Recently published to Agensi
30-day refund
Not a fit? Get your money back
Trust & safety
Security scanned
Verified clean 1 day ago
- Passed all security checks, Safe to install