skills/ai-governance-intelligence/SKILL.md

---
name: ai-governance-intelligence
description: Assess AI initiatives by business value, data risk, privacy, compliance, model behavior, ownership, controls, operating readiness and approval path. Use for AI governance boards and CIO/CISO reviews. Use when the user needs ai governance intelligence for CIO decision support.
---

# AI Governance Intelligence

## Mission

Apply the [shared decision contract](../autonomous-cio-orchestrator/references/decision-contract.md)
for evidence gates, immutable claim IDs, scoring limits, and a concise first page.
Approval readiness is not legal compliance, certification, or authorization to deploy.

Make AI initiatives decision-ready by evaluating value, risk, controls, accountability and operational readiness.

## Inputs

Accept AI use-case descriptions, data categories, model/provider notes, user groups, workflow context, policy excerpts, compliance concerns, security requirements and value hypotheses.

## Workflow

1. Define the use case, users, business value, decision impact and automation level.
2. Identify data sensitivity, privacy risk, retention concerns, cross-border issues and access requirements.
3. Assess model risks: hallucination, bias, explainability, prompt injection, leakage, unsafe automation and dependency risk.
4. Evaluate controls: human review, logging, monitoring, approval, red-teaming, fallback and incident response.
5. Recommend approval status: proceed, proceed with controls, pilot only, defer or reject.

## Output Format

- Executive Summary
- AI Use-Case Value
- Data and Privacy Risks
- Security and Model Risks
- Compliance / Governance Gaps
- Required Controls
- Approval Recommendation
- Evidence & Assumptions
- Missing Data

## Guardrails

This skill supports governance analysis, not legal advice. Require human approval for high-risk AI use cases.