Skill UI

This skill provides comprehensive methods for managing user data and ensuring compliance with global privacy regulations like GDPR and CCPA. It covers essential features such as data export, implementing the "right to be forgotten" (user deletion), managing user consent via metadata, and maintaining detailed audit logs. Use this for building robust, legally compliant user data management systems in modern web applications.

This guide provides practical implementation steps for ensuring GDPR compliance in data processing, consent management, and privacy controls. Use this skill when developing systems that handle EU personal data, managing Data Subject Requests (DSRs), or designing privacy-first architectures to meet strict international data regulations.

This skill provides comprehensive guidelines for handling sensitive people datasets from Juicebox AI. It covers critical data classification (PII, search results), required technical controls (AES-256 encryption, field-level masking), and adherence to international privacy regulations like GDPR and CCPA. It ensures users implement lawful data processing, proper consent tracking, and secure data export mechanisms.

This guide provides comprehensive strategies for implementing privacy-safe analytics using PostHog. It addresses critical compliance requirements like GDPR and CCPA, covering explicit consent management (opt-in/opt-out), real-time property sanitization (stripping PII like IP or tokens), and methods for handling Data Subject Access Requests (SAR) and the Right to Erasure. Use this to build highly compliant and privacy-preserving analytics pipelines.

This skill utilizes the Microsoft Graph API to parse Office 365 Unified Audit Logs for security incident investigation. It is designed to detect critical indicators of account compromise, including the creation of suspicious email forwarding rules, unauthorized mailbox delegation changes, suspicious OAuth application consent grants, and other signs related to Business Email Compromise (BEC).

A comprehensive guide providing detailed KQL and SPL detection queries for identifying potential abuse of Azure service principals within Microsoft Entra ID. This tool helps SOC analysts and security teams investigate complex threats like unauthorized credential addition, privileged role assignment, admin consent bypass, and enumeration, crucial for proactive threat hunting and incident response.

This skill analyzes Azure AD/Microsoft Entra ID environments to detect illicit OAuth application consent grants. It leverages the Microsoft Graph API and directory audit logs to enumerate permissions, identify overly broad scopes, and flag high-risk applications based on publisher verification status. It is essential for SOC analysts and threat hunters investigating cloud identity security incidents.

This tool performs a comprehensive review of OAuth 2.0 scopes, identifying over-permissioned third-party application integrations, excessive API scopes, and unused token grants. It is crucial for implementing the principle of least privilege across complex identity providers and SaaS ecosystems. Use cases include compliance auditing (GDPR, SOC 2), post-incident security reviews, and managing shadow IT risk by auditing cross-boundary consent grants.

Presents modal dialogs for asking clarifying questions, preferences, or confirmations when the user cannot see CLI output, ensuring explicit consent before sensitive or ambiguous actions.

This guide details best practices for using `lark-cli` to interact with Feishu resources. It covers initial configuration, switching between user and bot identities, and crucial authentication flows for AI agents. It provides detailed instructions on handling permission errors, implementing secure split-flow authentication, and managing high-risk write operations to ensure data integrity and user consent.

This guide addresses the challenges of automating Apple Notes within Continuous Integration (CI) pipelines on macOS. Because standard CI environments restrict TCC (Transparency, Consent, and Control) permissions, direct automation via osascript usually fails. It provides patterns for using mock clients for unit testing and outlines best practices for running real integration tests on self-hosted runners with proper permissions.

This skill scans live websites or local codebases to detect all data collection signals, including cookies, analytics, forms, and third-party processors. It then generates a comprehensive, 12-section privacy policy tailored for GDPR and CCPA compliance. The system maps detected data touchpoints to specific legal bases (Consent, Contract, etc.), ensuring the resulting policy accurately reflects the actual data practices of your application or website.