Skill UI

Guides teams through designing, implementing, and evidencing SOC 2 Type II controls aligned with the AICPA Trust Services Criteria, covering scoping, control mapping, evidence collection, remediation, and audit collaboration for a six- to twelve-month examination.

Develops comprehensive profiles for Advanced Persistent Threat (APT) groups, criminal organizations, and hacktivist collectivities. This tool aggregates TTP documentation, campaign data, and attribution indicators from major intelligence sources (MITRE ATT&CK, Mandiant, CrowdStrike) to help organizations update threat models, prioritize defensive controls, and prepare executive briefings on sector-specific risks.

A comprehensive guide to building HIPAA, GDPR, and other global compliance systems for healthcare applications. This pattern outlines best practices for protecting Protected Health Information (PHI) and Personally Identifiable Information (PII) by implementing robust access controls, Row-Level Security (RLS), and mandatory audit trails. Essential for any feature handling patient or clinical data.

Automates creation, querying, editing, and bulk operations for Feishu Bitable apps, including field, view, and record management with guidance on required formats, batch limits, and concurrency controls.

Controls BrowserWing-based browsers via HTTP endpoints to navigate pages, interact with elements (click/type/select), capture accessibility snapshots, run JavaScript, take screenshots, and execute batch sequences for data extraction workflows.

Checks AI agent implementations against the OWASP Agentic Security Initiative Top 10 risks, producing findings on controls, vulnerabilities, and recommendations for prompt injection, tool governance, escalation, logging, identity, policy, supply chain, and behavioral monitoring before production or audit.

This skill helps developers accurately find and explore the correct Windows API for specific platform capabilities, such as file access, camera usage, notifications, or UI controls. It searches a comprehensive local cache of WinMD metadata, providing full technical details including methods, properties, events, and enumeration values for APIs sourced from the Windows Platform SDK and WinAppSDK. It is indispensable when building complex features requiring deep integration with the Windows operating system.

A comprehensive guide to implementing secure and compliant data handling within Algolia. This skill demonstrates how to transform source records, strip Personally Identifiable Information (PII), implement attribute filtering, and enforce data access controls. It provides robust workflows for GDPR and CCPA compliance, including data deletion (Right to Erasure) and Data Subject Access Requests (DSAR).

A comprehensive guide for configuring and managing Claude API access across disparate environments (Development, Staging, Production). This skill details how to implement isolated API keys, model selection strategies, and crucial spend controls using Anthropic Workspaces, ensuring secure and reliable deployment pipelines for AI applications.

This comprehensive checklist guides developers through the entire process of moving an Apify Actor from a local development environment to a stable, production-ready state. It covers crucial stages including configuration validation, setting up scheduled runs, implementing robust webhooks for monitoring, establishing cost controls, and executing proper rollback procedures to ensure reliable live operations.

This guide provides essential security controls for integrating with the Attio REST API. It details best practices for managing API tokens, including applying least-privilege scopes, implementing secure secret management across various platforms (AWS, Vercel, etc.), executing proper token rotation, and validating webhook signatures to prevent common security vulnerabilities.

This skill provides comprehensive methods for interacting with the Figma API. It covers retrieving and managing comments, accessing version history, and handling sensitive user data. Emphasis is placed on implementing robust privacy controls, PII redaction, data classification, and ensuring compliance with regulations like GDPR/CCPA.