I am wondering if risk analysis and mitigation is a separate "rationality" skill.

Two related points that I think are very important and not dealt with:

• Exploration vs. exploitation (or when to stop doing research).
• Judgment under uncertainty (or how to deal with unpredictable long term consequences).