Skill UI

Nikto is a powerful open-source web server and web application scanner designed for comprehensive vulnerability assessment. It tests against over 7,000 potentially dangerous files, checks for outdated server software (over 1,250 versions), and identifies common vulnerabilities including XSS, SQL injection, misconfigurations, and weak SSL/TLS settings. It is essential for penetration testing and rigorous security auditing.

A comprehensive guide for preparing SaaS and cloud infrastructure companies for SOC 2 Type I and Type II audits. Covers mapping Trust Service Criteria (TSC), generating control matrices, performing thorough gap analysis, collecting evidence, and assessing overall compliance readiness across Security, Availability, Confidentiality, and Privacy domains. Essential for demonstrating operational trustworthiness to enterprise clients.

This skill automates the entire SOC 2 Type II audit lifecycle. It facilitates gap assessment against AICPA Trust Services Criteria (CC1-CC9) and collects continuous evidence from major cloud providers (AWS, Azure, GCP) and identity systems (Okta, Jira). It supports validating control effectiveness, remediation tracking, and overall compliance monitoring for Security, Availability, Processing Integrity, Confidentiality, and Privacy.

A comprehensive advisor for Hospital IT Managers and Digital Health Leaders. This skill guides digital transformation across the entire healthcare lifecycle, focusing on achieving clinical safety, compliance (HIMSS, ONA, JCI), and maximizing operational value. It covers everything from HIS/PEP integration (MV-SOUL, Tasy) and interoperability standards (FHIR, HL7) to advanced security frameworks (NIST, ISO 27001) and legal compliance (LGPD). Ideal for planning digital roadmaps and ensuring high-availability for life-critical systems.

This skill provides secure API integration patterns and implementation details for RemoFirst, a platform managing global HR, EOR, and payroll services. Use this when automating complex global employment workflows, retrieving employee data, or ensuring multi-jurisdictional payroll compliance.

This comprehensive guide details the configuration of Salesforce's multi-layered security model, including Profiles, Permission Sets, Roles, Organization-Wide Defaults (OWD), and Sharing Rules. It is essential for implementing robust Role-Based Access Control (RBAC) and integrating advanced features like SAML SSO, ensuring users only access necessary data.

This skill simulates a comprehensive auditor pressure test for any Information Security Management System (ISMS) against ISO 27001 standards. It forces interrogation on six critical areas—including scope, risk management, access control, and incident response—ensuring compliance and readiness before internal audits, Stage 1 certification, or surveillance audits.

A comprehensive tool for BizOps and VMO operators to conduct proactive, multi-dimensional vendor performance audits. It scores SaaS and third-party vendors using weighted criteria (reliability, security, support), tracks SLA compliance to identify potential credit claims, and classifies third-party risk across critical vectors (data, financial, regulatory). Ideal for quarterly vendor health checks and defensible renewal recommendations.

This skill performs comprehensive governance auditing of Fabric and Power BI tenant settings. It compares current configurations against a defined baseline, surfaces critical configuration drift, enumerates delegated overrides at capacity, domain, or workspace scope, and investigates associated Entra security groups. It provides grounded, actionable intelligence for complex governance decisions.

A comprehensive framework designed for formal procurement decision-making. This skill guides the creation of a weighted scorecard and detailed evaluation criteria by assessing functional fit, commercial terms, security compliance, and vendor stability. Use this when conducting RFPs, comparing multiple suppliers, or making critical software/service provider choices to ensure a holistic, risk-mitigated recommendation.