Skill UI

A comprehensive guide for optimizing licensing costs associated with AI developer tools (like Windsurf). It provides structured methods for auditing seat utilization, matching feature tiers to specific team roles, calculating the ROI per seat, and implementing continuous usage monitoring to maximize cost efficiency and minimize wasteful spending.

This powerful orchestrator coordinates the entire product development lifecycle by routing inquiries across 16 specialized sub-skills (e.g., RICE, OKRs, UX research, analytics). It acts as a central hub for both deterministic task routing and running continuous, machine-gated discovery loops. Use it when you need to systematically prioritize features, run A/B tests, or drive a goal from initial assumption to validated repository code.

This skill provides sophisticated project estimation by adapting to human-only, hybrid, or agent-first development modes. It uses research-backed PERT statistics and confidence bands (P50, P75, P90) to forecast development timelines for tasks, backlogs, and capacity planning. It continuously calibrates estimates based on actual completion data, ensuring accuracy in AI-assisted and hybrid development environments.

This platform deploys continuous attack graph analysis to map how adversaries can chain together various exposures—including vulnerabilities, misconfigurations, identity risks, and credential weaknesses—toward critical business assets. It pinpoints 'choke points,' allowing security teams to prioritize remediation efforts for maximum risk reduction with minimal effort, ideal for CTEM programs.

This process validates the necessity of elevated permissions across critical accounts, including domain admins, service accounts, and cloud IAM roles. It is a core identity governance function mandated by major compliance frameworks (SOX, PCI DSS) to enforce the principle of least privilege, detect stale or excessive access, and ensure continuous security compliance.

This skill automates the entire SOC 2 Type II audit lifecycle. It facilitates gap assessment against AICPA Trust Services Criteria (CC1-CC9) and collects continuous evidence from major cloud providers (AWS, Azure, GCP) and identity systems (Okta, Jira). It supports validating control effectiveness, remediation tracking, and overall compliance monitoring for Security, Availability, Processing Integrity, Confidentiality, and Privacy.

Provides expert consultation on ITIL 4 and the emerging ITIL 5 Digital Product & Service Management (DPSM) framework. This skill guides the integration of AI governance, ESG sustainability principles, and product-centric thinking into modern, high-velocity IT service value streams. Ideal for optimizing IT operations and achieving continuous compliance.

This tool simulates the rigorous interrogation of a SOC 2 Type II auditor. It forces readiness checks across six critical domains—including scope definition, control consistency, change management, exception tracking, and evidence timing—at key audit milestones (pre-observation, mid-period, pre-field-test). Essential for maintaining continuous compliance.

This skill automates the transformation of high-level product specifications (PRDs) or feature specs stored in Notion into an actionable development lifecycle. It systematically parses requirements, generates structured implementation plans, breaks down complex needs into manageable, linked tasks, and facilitates continuous progress tracking, ensuring all development artifacts remain synchronized with the original spec.

This guide details the entire lifecycle of building a robust anti-phishing security awareness program. It covers everything from initial phishing simulations and designing role-specific training modules to continuous deployment, metric tracking, and optimization. The goal is to improve human security posture, ensure compliance, and build a strong defense culture against social engineering threats.

A comprehensive workflow for establishing and maturing a Third-Party Risk Management (TPRM) program. This guide covers the entire vendor lifecycle, from initial inventory and risk tiering to conducting due diligence (SOC 2, ISO 27001), embedding security requirements in contracts, and ensuring continuous monitoring and secure offboarding. Essential for compliance and supply chain risk management.

A structured template for creating multi-panel, three-card carousel posts for social media platforms (e.g., Instagram, LinkedIn). This format is designed to tell a complete story or deliver a sequence of information, ensuring the headline flows continuously across all three cards to maximize user engagement and narrative impact.