Skill UI

This comprehensive skill provides a security posture assessment for AWS environments. It uses AWS CLI commands to audit critical security areas, including IAM policy review, network security groups, data encryption status (EBS, S3, RDS), and logging mechanisms (CloudTrail, VPC Flow Logs). Use this to proactively identify misconfigurations and ensure adherence to security best practices and compliance standards.

Automates OWASP Top 10 (2021) security assessments via the owasp-compliance-checker plugin, scanning codebases for vulnerabilities, reporting compliance gaps, and suggesting remediation advice for developers or auditors.

This expert tool automates compliance checks for EU GDPR and German DSGVO. It scans codebases for privacy risks (PII, special data), generates formal Data Protection Impact Assessments (DPIA), and manages the entire lifecycle of Data Subject Access Requests (DSARs), ensuring adherence to strict legal deadlines. Ideal for privacy audits and compliance planning.

A comprehensive skill for implementing and managing Information Security Management Systems (ISMS) aligned with ISO 27001:2022 and global regulatory standards. This tool guides users through critical security processes, including risk assessments, control implementation, gap analyses, and preparing for audits. Essential for HealthTech and MedTech companies ensuring data privacy and compliance.

Provides ISO 27001 ISMS audit and certification guidance, covering program planning, risk-based execution, Annex A control assessment, finding management, and Stage 1/Stage 2 documentation support for compliance teams.

Provides auto-triggered guidance for creating enterprise risk assessments, covering workflows that span governance, compliance, project management, and integration best practices while validating outputs for production readiness.

Guide to mastering essential security scanning tools for network discovery, vulnerability assessment, web application testing, wireless checks, and compliance reporting, covering selection, configuration, and practical workflows.

This skill specializes in transforming theoretical threat models, risk assessments, and business context into concrete, actionable security requirements. It is essential for writing detailed security user stories, defining robust acceptance criteria, building comprehensive security test cases, and ensuring compliance requirement mapping. Use it when bridging the gap between identifying a vulnerability and specifying how the system must be secured.

Guides authorized practitioners through Nmap, Masscan, Nessus, OpenVAS, Burp Suite, and OWASP ZAP for network discovery, vulnerability assessment, web application testing, wireless security, and compliance reporting across diverse environments.

This skill provides a comprehensive guide for securely handling student audio data, assessment records, and learning progress within the Speak platform. It focuses on implementing robust data pipelines while ensuring compliance with international privacy regulations such as GDPR and COPPA. Essential for developers integrating or maintaining language learning applications.

Guides authorized practitioners through Nmap, Masscan, Nessus, OpenVAS, Burp Suite, and OWASP ZAP for network discovery, vulnerability assessment, web application testing, wireless security, and compliance reporting across diverse environments.

This script provides a comprehensive security assessment of Microsoft Entra ID (Azure AD) identity configurations. It audits for risky authentication policies, overly permissive role assignments, stale accounts, conditional access gaps, and guest user risks using PowerShell and Graph API. Ideal for compliance audits, security posture review, and post-merger security assessments.