Skill UI

An expert advisor on the NIST Cybersecurity Framework (CSF) 2.0 and 1.1. This skill assists security, risk, and compliance teams with comprehensive risk management consulting. Use it for gap assessments, profile creation (Current vs. Target), implementation roadmaps, tier advancement guidance, and mapping to other standards like ISO 27001 and CIS Controls.

This skill provides a comprehensive guide to drafting legally compliant termination notices under French labor law. It walks users through collecting detailed information regarding the company, employee, and specific misconduct (such as gross misconduct or personal reasons). The generated letter structure ensures all mandatory components, including detailed, factual, and exhaustive reasons, are included, thereby protecting the employer in potential legal disputes.

An expert advisory tool for the New Zealand Information Security Manual (NZISM). Provides comprehensive guidance for NZ government agencies, contractors, and supply chains on mandatory security compliance. Use cases include gap analysis, system classification (Unclassified to Top Secret), security risk management, and achieving GCSB/NCSC NZ accreditation.

A comprehensive guide for authorized red team and penetration testing engagements, detailing techniques that exploit human trust and psychological vulnerabilities. Coverage includes pretexting, vishing, smishing, physical access attacks (e.g., badge cloning, tailgating), USB payload delivery, and OSINT-driven targeting. This methodology maps to key MITRE ATT&CK T-numbers, simulating real-world, multi-vector adversaries to test organizational defenses at the human layer.

This advanced tool maps an organization's complete internet footprint by tracing ownership directly from a legal entity (LEI), not just a single seed domain. It discovers owned domains, netblocks, ASNs, and subsidiaries, including 'dark' or unlinked IP space and M&A acquired assets. It provides auditable attribution scoring for robust intelligence gathering.

This skill reviews outside legal counsel invoices and associated billing data, including LEDES exports, OCGs, approved rates, and budgets. It assesses compliance against internal rules and benchmarks spend, staffing, and law firm performance. Users can generate comprehensive management reports, scorecards, and dispute logs for in-house legal departments.

This skill assists in-house legal teams in architecting external counsel panels. It helps define optimal panel structures, establish weighted selection criteria for law firms, and perform right-sourcing analyses (tiering). Users can assess coverage gaps, optimize legal spend, and transform informal vendor relationships into strategic, data-driven frameworks, ensuring cost efficiency and strategic alignment.

This skill guides in-house legal teams through the full lifecycle management of external counsel panels. It produces comprehensive reports covering panel health assessment, identifying coverage gaps (practice area, jurisdiction, tier), managing firm exits with formal documentation, and scoping renewal processes (Panel Refresh Brief) for RFPs, ensuring optimal legal resource allocation and governance.

This skill provides a comprehensive framework for in-house legal teams to evaluate the performance of outside counsel. It guides the creation of a detailed scorecard, structures post-matter feedback forms, prepares Quarterly Business Review (QBR) materials, and generates comparative firm scorecards, allowing for data-driven panel decision-making.

A comprehensive guide and toolkit for drafting privacy policies that meet strict GDPR and CNIL compliance standards. It provides essential templates, outlines mandatory disclosures (data rights, processing purposes, legal bases), and includes a structured questionnaire to ensure all necessary client information—including data types, processing activities, and legal justifications—is collected for a robust and legally sound policy.

A zero-hallucination tool that generates comprehensive, jurisdiction-aware privacy policies. It guides non-lawyer founders to create legally sound policies for global regulations like GDPR, CCPA/CPRA, LGPD, and PIPL. By adhering to a "jurisdiction-first" methodology, it ensures only required clauses are included, minimizing legal risk and eliminating fabricated legal claims.

This guide outlines the mandatory steps for generating approved purchase orders. Before utilizing the dedicated `create-purchase-order` tool, users must first review the current approval policy. Once approval is confirmed, the tool must be called using the correct SKU and requested quantity, and the official order template must be used for final confirmation.