Skill UI

Provides auto-triggered guidance for creating enterprise risk assessments, covering workflows that span governance, compliance, project management, and integration best practices while validating outputs for production readiness.

This skill covers the complete lifecycle for establishing, implementing, and maintaining an Information Security Management System (ISMS) based on ISO/IEC 27001:2022. Users learn the full process, from initial gap analysis and risk assessment (including defining risk treatment plans) to selecting Annex A controls, developing the Statement of Applicability (SoA), conducting internal audits, and preparing for final certification. It is essential for organizations needing to achieve formal security compliance and robust governance.

This tool automates the entire Privacy Impact Assessment (PIA) workflow. It systematically maps data flows, calculates privacy risk scores using established matrices (NIST PRAM, ICO DPIA), and checks compliance against major regulations like GDPR and CCPA/CPRA. It is essential for organizations launching new systems or preparing for regulatory audits to ensure data privacy compliance.

This skill automates the entire SOC 2 Type II audit lifecycle. It facilitates gap assessment against AICPA Trust Services Criteria (CC1-CC9) and collects continuous evidence from major cloud providers (AWS, Azure, GCP) and identity systems (Okta, Jira). It supports validating control effectiveness, remediation tracking, and overall compliance monitoring for Security, Availability, Processing Integrity, Confidentiality, and Privacy.

Provides C-level strategic guidance for startups deciding on advanced AI implementation. Covers critical decisions including model build-vs-buy analysis (API vs. fine-tune vs. in-house), regulatory compliance risk assessment (EU AI Act, NIST RMF), economic modeling for self-hosting breakeven, and optimal AI team scaling. This is a high-level advisory tool, not a tactical engineering guide.

An operational compliance tool for the EU AI Act (Regulation (EU) 2024/1689). It assists compliance teams with three critical decisions: classifying AI risk tiers (prohibited, high, limited, minimal), planning conformity assessment routes for high-risk systems (Module A vs. Module H), and tracking role-specific obligations for providers, deployers, and importers. Provides article-cited guidance for system intake and regulatory planning.

Assesses legal compliance and risk for temporary event staffing operations in the US and Canada. It checks critical areas including worker classification (W-2 vs 1099), joint-employer liability, wage/hour adherence, and workers' compensation requirements. Includes live state-by-state lookups for minimum wage and overtime rules.

This meta-skill provides an auditable workflow for professional compliance self-assessments (e.g., GDPR, SOC2). It executes deep research while retaining citation evidence, then compiles the findings into a comprehensive package: a signable DOCX report, a read-only PDF archive for permanence, and a persistent memory note to guarantee the evidence chain is recallable. Ideal for structured policy auditing.

A comprehensive framework for managing third-party risk (TPRM) throughout the entire vendor lifecycle. This tool guides users through inventory, risk tiering, running due diligence questionnaires (SIG, CAIQ), reviewing security evidence (SOC 2, ISO 27001), codifying requirements in contracts, and establishing continuous monitoring protocols. It is essential for maintaining compliance, managing supply chain risk, and securing data handled by external vendors.