Skill UI

This expert skill provides comprehensive assistance for Information Security Management System (ISMS) compliance based on ISO 27001 (2013/2022). It is ideal for security and compliance teams needing support with gap analysis, risk assessment, policy drafting, Statement of Applicability (SoA) generation, and auditing preparation. It covers all mandatory clauses and Annex A controls.

This expert skill provides comprehensive guidance on International Traffic in Arms Regulations (ITAR) compliance for US defense contractors and exporters. It covers the entire compliance lifecycle, including jurisdiction determination (ITAR vs. EAR), USML classification, DDTC registration, obtaining export licenses (DSP-5/73), and structuring critical agreements like TAA and MLA. Use this skill for any question related to US defense export control law and mitigation of compliance risks.

This skill provides a comprehensive audit framework for evaluating AI agents used in legal, compliance, or business operations. It assesses the risks associated with delegated authority—such as sending messages, filing documents, or making payments—by checking for adequate controls, logging, revocation mechanisms, and clear accountability chains. It is essential for firms connecting agents to sensitive systems like CRM, court portals, or financial accounts to ensure safe and compliant deployment.

An expert advisor on the NIST Cybersecurity Framework (CSF) 2.0 and 1.1. This skill assists security, risk, and compliance teams with comprehensive risk management consulting. Use it for gap assessments, profile creation (Current vs. Target), implementation roadmaps, tier advancement guidance, and mapping to other standards like ISO 27001 and CIS Controls.

A comprehensive skill for conducting rigorous sanctions screening and export control compliance analysis. It covers individual designations, sectoral restrictions (energy, finance), dual-use goods, international payment systems (SWIFT/USD/EUR), and complex extraterritorial regimes (OFAC, EAR, ITAR, Chinese ECL). The skill enforces strict legal due diligence, requiring real-time source verification and explicitly flagging all potential risks and limitations to prevent legal hallucinations in global transactions.

A specialized tool for real-time compliance screening across international sanctions lists (UN, OFAC, EU, OFSI) and export control regimes (EAR, ITAR). It provides deep analysis of individual designations, sectoral risks, and dual-use goods, mapping jurisdictional requirements across 30+ countries. All findings are mandatory sourced and verified against official databases, ensuring zero hallucination and high legal accuracy for compliance professionals.

A comprehensive tool for managing scope across the entire lifecycle of a legal matter. It helps legal teams establish a baseline scope, proactively track all out-of-scope (OOS) activities, draft necessary client communications, and manage scope creep. By automating capture and surfacing confirmations, it transforms scope management from an adversarial task into a professional, client-focused service, preventing budget surprises and ensuring project alignment.

An expert assistant for mastering SOC 2 compliance, covering all five Trust Services Criteria (Security, Availability, Confidentiality, Processing Integrity, Privacy). Use this skill for gap analysis, drafting policies, documenting controls, gathering audit evidence, and conducting vendor risk reviews, guiding organizations from initial assessment to sustained compliance readiness.

An expert advisory skill covering the SWIFT Customer Security Programme (CSP) and the Customer Security Controls Framework (CSCF) v2026. It helps financial institutions, banks, and service bureaus achieve mandatory compliance with 32 security controls across three core objectives: Secure Your Environment, Know and Limit Access, and Detect and Respond. Use this skill for gap analysis, understanding architectural types (A1-B), and navigating the latest mandatory changes, such as Control 2.4.

Expert AI auditor for FDA Food Safety (FSMA), HACCP, and PCQI compliance. Reviews food facility records, preventive controls, and corrective actions to prepare for inspections.

Implement an ISO/IEC 27001:2022 Information Security Management System: define ISMS scope, run asset-based risk assessments, build the Statement of Applicability, and deploy Annex A controls through the PDCA cycle.

This skill provides an expert guide for managing the complete Odoo purchase workflow, from RFQ to vendor bill. It covers configuration of purchase orders, approval workflows, vendor price lists, and 3-way matching controls to ensure accurate procurement and accounting processes within the ERP system.