Ceo As Risk Officer

Name: Ceo As Risk Officer
Author: kangarooking

kangarooking/buffett-letters-skill

45 installs
65 repo stars
Updated April 17, 2026
kangarooking/buffett-letters-skill

Understand CEO responsibility for enterprise risk management and why risk control cannot be delegated.

About

Principle that CEO must personally own risk management. Risk preparedness requires action, not forecasting; delegation to committees is insufficient.

Personal CEO accountability
Proactive risk preparation

Ceo As Risk Officer by the numbers

45 all-time installs (skills.sh)
+1 installs in the week ending Aug 2, 2026 (Skillselion tracking)
Ranked #606 of 1,106 Finance & Trading skills by installs in the Skillselion catalog
Data as of Aug 5, 2026 (Skillselion catalog sync)

npx skills add https://github.com/kangarooking/buffett-letters-skill --skill ceo-as-risk-officer

Add your badge

Show developers this skill is listed on Skillselion. Paste this into your README.

[![Listed on Skillselion](https://skillselion.com/badge/skills/kangarooking/buffett-letters-skill/ceo-as-risk-officer.svg)](https://skillselion.com/skills/kangarooking/buffett-letters-skill/ceo-as-risk-officer)

Installs	45
repo stars	★ 65
Last updated	April 17, 2026
Repository	kangarooking/buffett-letters-skill ↗

What it does

Understand CEO responsibility for enterprise risk management and why risk control cannot be delegated.

Files

SKILL.mdMarkdownGitHub ↗

CEO = 首席风险官（含诺亚法则）

R — 原文 (Reading)

"The CEO of any large organization must be the Chief Risk Officer." (2022)

"Noah did not wait for it to rain before building the ark." (2001)

I — 方法论骨架

CEO的风险责任不可委托：

风险管理不是独立部门的工作——CEO必须亲自理解和管理风险
"预测下雨不算，造船才算"——知道风险存在但不行动等于没有管理
委员会报告≠风险已管理——只有CEO能调动全组织资源应对
伯克希尔模式：保持$300亿+现金、不用杠杆、不依赖陌生人善意

A1 — 书中的应用

案例: NetJets危机

问题: NetJets在2009年面临生存危机，亏损严重
使用: 巴菲特被迫亲自接管，发现风险失控根因是管理层未将风险视为首要责任
结果: 深刻认识到"CEO绝不能委托风险控制"——亲自管理后扭转局面

A2 — 触发场景

1. 评估一家公司的风险管理是否到位 2. 理解为什么大公司也会突然暴雷 3. 设计组织架构时决定风险管理的汇报线 4. 作为CEO/管理者反思自己的风险责任

语言信号

"风控部门管风险不就行了吗？"
"CEO该亲自管风险吗？"
"为什么大公司会暴雷？"
"风险管理该怎么做？"

E — 可执行步骤

1. 检查CEO是否亲自管风险

完成标准：CEO能否准确描述公司最大的3个风险？是否定期审查？

2. 做"诺亚测试"

完成标准：公司是否在晴天时就为暴雨做准备？还是等到下雨才行动？

3. 验证"不依赖陌生人"

完成标准：在最坏情况下，公司是否不需要任何外部融资就能存活？

B — 边界

CEO亲自管风险≠微观管理——需要建立系统但最终责任不可下放
中小企业CEO可能没有资源做全面风险管理——但核心风险仍需亲力亲为
作者盲点：巴菲特管理的是一个超大资本基座的公司——普通CEO面临的风险类型和压力完全不同

---

审计信息

验证通过: V1 ✓ / V2 ✓ / V3 ✓
蒸馏时间: 2026-04-16

{
  "skill": "ceo-as-risk-officer",
  "version": "0.1.0",
  "source_book": "《巴菲特致股东的信》 — 沃伦·巴菲特",
  "darwin_compatible": true,
  "test_cases": [
    {
      "id": "should-trigger-01",
      "type": "should_trigger",
      "prompt": "公司有风控部门，CEO还需要亲自管风险吗",
      "expected_behavior": "应激活 ceo-as-risk-officer，指出CEO的风险责任不可委托给任何部门",
      "notes": "风险责任委托的误区"
    },
    {
      "id": "should-trigger-02",
      "type": "should_trigger",
      "prompt": "为什么大公司会突然暴雷",
      "expected_behavior": "应激活 ceo-as-risk-officer，解释CEO未亲自管风险+诺亚法则——晴天不造船雨天就沉",
      "notes": "企业暴雷的风险根因"
    },
    {
      "id": "should-trigger-03",
      "type": "should_trigger",
      "prompt": "公司应该设立独立的风险管理委员会吗",
      "expected_behavior": "应激活 ceo-as-risk-officer，可以设但CEO本人必须亲自理解和管理风险",
      "notes": "风险管理架构设计"
    },
    {
      "id": "should-not-trigger-01",
      "type": "should_not_trigger",
      "prompt": "帮我分析这家公司的盈利能力",
      "expected_behavior": "不应激活本skill，这是盈利分析",
      "notes": "诱饵：盈利分析≠风险管理"
    },
    {
      "id": "should-not-trigger-02",
      "type": "should_not_trigger",
      "prompt": "这个股票值多少钱",
      "expected_behavior": "不应激活本skill，这是估值请求",
      "notes": "诱饵：估值≠风险治理"
    },
    {
      "id": "edge-01",
      "type": "edge_case",
      "prompt": "中小企业CEO没时间亲自管所有风险",
      "expected_behavior": "应承认资源限制但强调核心风险仍需亲力亲为——不能什么都委托",
      "notes": "边界：资源有限但核心风险不可下放"
    }
  ],
  "minimum_pass_rate": 0.8
}