skills/wsh-risk-assessment/SKILL.md

---
name: wsh-risk-assessment
description: Create a new workplace safety and health risk assessment aligned with Singapore's WSH Risk Management Code of Practice. Use for task decomposition, hazard and consequence identification, existing-control evaluation, 5x5 risk evaluation, additional-control selection, and projected residual risk. Do not use merely to audit an existing RA or track control implementation.
---

# Create a WSH Risk Assessment

Build a site-specific draft with the people who know the work. Library entries are prompts, not evidence. Label missing information and assumptions, and never claim compliance, approval, completeness, or competent-person endorsement.

## Input gate

Before creating task-specific rows or scores, obtain: workplace and location; scope and task steps; exposed groups; equipment, tools, materials and substances; and controls actually in place. Do not replace these inputs with generic examples. Ask once for any missing essentials.

## References

Read [core methodology](references/core-methodology.md), [risk scoring](references/risk-scoring.md), and [output format](references/Output Format.txt). Read only the relevant additional material:

- [Specialised hazards](references/specialised-hazards.md) for chemical, biological, radiation, lifecycle, or exposure-route issues.
- [Human and organisational factors](references/human-organisational-factors.md) when workload, competence, communication, supervision, fatigue, or organisational conditions may affect risk.
- [Control selection](references/control-selection.md) when proposing additional controls.
- Appendices A-D for hazard, control, activity, and consequence prompts.

User-supplied methodology and scoring thresholds take precedence unless they conflict with safety, law, or the current request; flag conflicts.

## Assessment rules

- Work at task or sub-task level. Use one row per meaningful hazard-consequence pathway.
- Record only existing controls represented as currently implemented and functioning.
- Score current risk after considering those existing controls.
- Recommend additional controls in hierarchy order and identify owner, target date/status, and effectiveness measure.
- Do not lower severity merely because administrative controls or PPE are proposed unless the credible consequence genuinely changes.
- Residual scores based on unimplemented controls are **projected**, not verified. Confirm them only after implementation evidence and effectiveness checks.
- Apply risk bands only when an authoritative organisational scheme is supplied. Otherwise report S, L, and RPN without inventing Low/Medium/High thresholds.

End with site-validation and management-approval notes. Suggest natural-language next steps rather than command keywords.