Skill UI

Automate the rotation of sensitive credentials, including RDS database passwords, API keys, and OAuth tokens, using AWS Secrets Manager and Lambda. This skill ensures secure credential lifecycle management, helping maintain system security and compliance by automatically updating credentials for various AWS and third-party services.

This skill provides comprehensive guidance and established patterns for managing and maintaining Windows 11 operating systems. It is designed to assist users in performing routine system updates, troubleshooting issues, and general system administration tasks within a Windows 11 environment, ensuring system stability and optimal performance.

Comprehensive guidance for medical device manufacturers navigating complex FDA regulatory requirements. Covers device classification, submission pathways (510(k), PMA, De Novo), Quality Management System Regulation (QMSR/ISO 13485), HIPAA compliance, and cybersecurity best practices. Use this when determining the correct regulatory route for a new or modified device.

This comprehensive guide provides expertise in conducting ISO 13485 internal audits for medical device Quality Management Systems (QMS). It covers the full audit lifecycle, including risk-based planning, systematic evidence collection, classifying nonconformities (Major/Minor), and managing CAPA verification to ensure regulatory compliance and continuous improvement.

A comprehensive guide for designing and managing document control systems for ISO 13485-compliant Quality Management Systems (QMS), specifically tailored for the medical device industry. This resource covers document numbering, version control, change management workflows, approval processes, and ensures compliance with rigorous standards like 21 CFR Part 11, including electronic signatures and audit trails.

This guide defines the role and responsibilities of a Senior Quality Manager Responsible Person (QMR) for highly regulated MedTech and HealthTech environments. It covers essential functions under ISO 13485, including leading management reviews, establishing quality objectives, monitoring performance KPIs, and maintaining strict regulatory compliance oversight. Use this resource when developing a Quality Management System (QMS) or managing regulatory accountability.

Guides medical device teams through preparing ISO 13485:2016 Quality Management System documentation by combining gap analysis, requirements references, templates, and step-by-step creation workflows for manuals, procedures, and compliance artifacts.

A comprehensive expert system simulating 15+ years of experience in global trade compliance (US, EU, UK, APAC). It specializes in HS/HTS classification, tariff optimization, sanctioned party screening (SDN), and preparing complex customs documentation to ensure legal, cost-effective, and compliant cross-border goods movement.

This script automates the detection and exploitation of Broken Function Level Authorization (BFLA) in APIs, following OWASP API Top 10 guidelines. It simulates low-privilege users attempting to access or modify restricted administrative endpoints (e.g., user management, system settings) using techniques like role switching, path manipulation, and parameter tampering. Essential for assessing vertical privilege escalation risks and verifying robust Role-Based Access Control (RBAC).

Provides comprehensive, end-to-end guidance for establishing and maintaining an Information Security Management System (ISMS) compliant with ISO/IEC 27001:2022. This framework covers critical phases including gap analysis, detailed risk assessment methodology, selecting and documenting Annex A controls, creating the Statement of Applicability (SoA), and preparing for internal and external certification audits.

This skill details the deployment of Privileged Access Management (PAM) for critical database systems, including Oracle, SQL Server, PostgreSQL, and MySQL. It covers essential security controls such as session proxy configuration, credential vaulting, query auditing, and enforcing least-privilege access, helping organizations meet stringent compliance and security standards.

Provides a structured, risk-based framework for managing patches in Operational Technology (OT) and Industrial Control Systems (ICS). It addresses the critical difference between IT and OT environments, prioritizing safety and availability over immediate remediation. The guide covers risk scoring, vendor compatibility testing, staged deployment, and defining compensating controls for unpatchable assets.