whatisgithub

What is break-risk-intel-skill?

c0urag1/break-risk-intel-skill — explained in plain English

Analysis updated 2026-05-18

1PowerShellAudience · ops devopsComplexity · 2/5LicenseSetup · easy

In one sentence

An agent skill for Claude Code and Codex CLI that helps risk and fraud teams analyze grey-market and fraud cases using a structured risk framework.

Mindmap

mindmap
  root((break-risk-intel-skill))
    What it does
      Classifies risk cases
      Uses BREAK framework
      Outputs investigation plans
    Use cases
      Coupon abuse analysis
      Account farming detection
      Payment fraud review
    Audience
      Risk control teams
      Trust and safety
    Scope
      Authorised analysis only
      No live intel feeds

Code map

Detail Auto

An interactive map of this repo's files and how they connect — its source is parsed live in your browser. Click Visualize to build it.

filefunction / class

What do people build with it?

USE CASE 1

Classify a suspected grey-market case using BREAK risk codes.

USE CASE 2

Generate an investigation plan and governance recommendations for a fraud case.

USE CASE 3

Look up methodology guides for account risk, payment risk, or content spam.

How does it compare?

c0urag1/break-risk-intel-skillnickalaslight/fable-sonnet-orchestrator-kitpnwcomputers/jwrapper-screenconnect-rat-remediation-toolkit
Stars111
LanguagePowerShellPowerShellPowerShell
Setup difficultyeasymoderatemoderate
Complexity2/53/53/5
Audienceops devopsdeveloperops devops

Figures from each repo's GitHub metadata at analysis time.

How do you get it running?

Difficulty · easy Time to first run · 5min
Use freely for any purpose, including commercial use, as long as you keep the copyright notice (Apache License 2.0).

So what is it?

break-risk-intel-skill is an agent skill for Claude Code and Codex CLI that helps risk control, anti-fraud, Trust and Safety, and business security teams analyse cases involving grey-market or fraudulent activity. It is built on top of JDArmy/BREAK, an open-source knowledge framework that enumerates and categorises business risk scenarios and evasion techniques. The skill gives the agent structured vocabulary from the BREAK framework, so it can output a specific risk classification, BREAK risk codes, a hypothetical chain of how a grey-market operation likely worked, observable detection signals, an investigation plan, and governance recommendations, rather than a vague "there might be some risk" response. The repository includes a references/ directory with BREAK risk entries and a threat actor and attack tool index, a knowledge/ directory with methodology guides covering areas such as marketing abuse, account risk, merchant fraud, content spam, and payment risk, a scenes/ directory with 15 BREAK business scenario playbooks, an examples/ directory with eight sample case walkthroughs covering coupon abuse, account farming, fake transactions, credential stuffing, proxy and device evasion, refund abuse, and payment cashout, and a templates/ directory with formats for risk matrices, investigation plans, and executive review summaries. The skill does not provide real-time intelligence feeds, crawl external forums, or supply operational steps for conducting the abusive activities it documents. It is intended for authorised risk analysis and business security scenarios only. Both this project and the upstream JDArmy/BREAK framework are licensed under Apache License 2.0.

Copy-paste prompts

Prompt 1
Use the break-risk-intel-skill to classify this suspected coupon abuse case and give me the BREAK risk codes.
Prompt 2
Walk me through the investigation plan template for a merchant fraud case.
Prompt 3
Show me the methodology guide for detecting account farming from the knowledge directory.

Frequently asked questions

What is break-risk-intel-skill?

An agent skill for Claude Code and Codex CLI that helps risk and fraud teams analyze grey-market and fraud cases using a structured risk framework.

What language is break-risk-intel-skill written in?

Mainly PowerShell.

What license does break-risk-intel-skill use?

Use freely for any purpose, including commercial use, as long as you keep the copyright notice (Apache License 2.0).

How hard is break-risk-intel-skill to set up?

Setup difficulty is rated easy, with roughly 5min to a first successful run.

Who is break-risk-intel-skill for?

Mainly ops devops.

Open on GitHub → Ask about another repo

This repo across BitVibe Labs

Verify against the repo before relying on details.