Skill UI

This comprehensive router indexes 12 specialized product skills, covering the entire product development lifecycle. It acts as a central hub, mapping general product requests—such as feature prioritization (RICE), OKR setting, UX research, competitive analysis, and roadmap planning—to the correct, self-contained professional workflow.

Guides solo founders through end-to-end GTM decisions, stacking affordable AI-supported tools, designing agent workflows, allocating their most precious time, and knowing when to hire so they can scale go-to-market without adding headcount.

DefectDojo is an open-source platform designed to centralize, aggregate, and manage security vulnerabilities. It integrates findings from over 200 security scanners (e.g., Nessus, ZAP, Trivy), automatically deduplicates results, tracks remediation progress, and provides executive-level dashboards. It supports robust workflows, including CI/CD pipeline integration and Jira ticketing, making it essential for DevSecOps practices and compliance adherence.

This skill provides SOC teams with a structured, multi-source workflow to investigate potential insider threats. It correlates data from SIEM, DLP, EDR, and HR feeds to detect data exfiltration attempts (via cloud, USB, email), unauthorized access patterns, and policy violations. It is crucial for building comprehensive investigation timelines, especially when handling departing employees or suspected data theft.

A detailed guide for conducting professional disk forensics investigations, covering the entire lifecycle from evidence acquisition to artifact analysis. This includes establishing a strict chain of custody, performing bit-for-bit forensic imaging using write blockers, identifying file system structures (MFT, inodes), recovering deleted files, analyzing key artifacts (Prefetch, Amcache), and reconstructing precise timelines of activity for incident response cases.

A comprehensive guide detailing the process of performing entitlement reviews and access certification campaigns using SailPoint IdentityIQ. This skill is critical for maintaining compliance (SOX, HIPAA) by automating manager reviews, targeted privileged access validation, and identifying Separation of Duties (SOD) violations. It ensures robust access governance and facilitates automated remediation workflows.

CRM-lite workflow for GEO agencies to capture and nurture prospects through lead, qualification, proposal, and won/lost stages while recording audits, notes, and revenue forecasts from a persistent JSON store.

Guides founders to turn a product idea into a deliverable manual process, document every step, validate payment-ready customers, and plan when to automate after mastering the manual workflow.

This guide provides a comprehensive blueprint for implementing robust Data Loss Prevention (DLP) policies using Microsoft Purview. It covers the configuration of sensitivity labels (encryption, content marking) and the creation of custom DLP rules using regex patterns. The workflow extends to endpoint DLP deployment for controlling file operations on Windows and macOS devices, ensuring sensitive data protection across SharePoint, Exchange, and OneDrive. It leverages PowerShell and the Microsoft Graph API for advanced, programmatic compliance management.

This tool automates the entire Privacy Impact Assessment (PIA) workflow. It systematically maps data flows, calculates privacy risk scores using established matrices (NIST PRAM, ICO DPIA), and checks compliance against major regulations like GDPR and CCPA/CPRA. It is essential for organizations launching new systems or preparing for regulatory audits to ensure data privacy compliance.

A comprehensive tool for managing Lark/Feishu approval workflows. It allows users to query pending or completed tasks, view detailed instance progress, and perform essential actions such as approving, rejecting, transferring, adding signers, or following up on requests. Ideal for automating manual approval steps in a business process.

This mode simulates a P9 Tech Lead role, specializing in strategic project management and complex task orchestration. It does not write code itself, but focuses on generating detailed, structured Task Prompts (six elements) and managing the entire workflow delivery from multiple specialized agents (P8 teams). Ideal for coordinating large, complex projects requiring strategic decomposition and coordination of three or more parallel agents.