Risk posture

The visual risk dashboard — headline numbers, a likelihood-by-impact heat map, treatment status per register, and where risk concentrates.

Plugin	Area	Access
drata-grc-skills	Risk Management	Read-only

Purpose

Renders a 5×5 likelihood by impact heat map.
Shows treatment status as a stacked bar per register.
Breaks risk down by category, owner concentration and vendor exposure.

Access: This skill cannot change anything in Drata.

MCP tools used

MCP tool	Level	OAuth scope
Get Company	Read	`read:company`
Search Risks	Read	`read:risk`
List Risk Registers	Read	`read:risk-registers`
Search Controls	Read	`read:controls`

This skill uses every scope listed above; without them it fails partway through. What any tool returns is bounded by your Drata role as well as the scope — see MCP Server setup.

Run it

Copy

Copied

/plugin marketplace add drata/drata-claude-plugin
/plugin install drata-grc-skills@drata

Then run the skill by name:

Copy

Copied

/drata-grc-skills:drata-risk-report

Or ask for it in your own words:

"risk heat map"
"risk by category"

Before you start

Connect the Drata MCP server. See MCP Server setup.
Your MCP OAuth configuration must grant the scopes behind the tools listed above.

Related skills

Risks needing work — Only the risks where the record is incomplete or contradictory and someone owes an edit.
Fix risks — Work the register from a single menu with live counts.