Skill UI

Provides FDA regulatory guidance for medical device manufacturers encompassing pathway strategy for 510(k)/PMA/De Novo submissions, QSR compliance, HIPAA assessments, and cybersecurity planning to support premarket filings.

This skill simulates an expert cybersecurity auditor specializing in DevSecOps methodologies and comprehensive security assurance. It guides users through running detailed security audits, performing threat modeling, and assessing vulnerabilities (e.g., IDOR). Capabilities cover SAST, DAST, cloud security posture, zero-trust architectures, and compliance adherence to major frameworks like GDPR, HIPAA, and PCI-DSS, ensuring security is integrated throughout the entire SDLC.

Guides cybersecurity teams to design reusable incident response playbooks aligned with NIST SP 800-61r3 and SANS PICERL, covering structured procedures, decision trees, escalation rules, RACI matrices, and SOAR automation for documented, auditable IR readiness.

Guides teams through a complete NIST Cybersecurity Framework 2.0 maturity assessment, mapping current implementation tiers across Govern, Identify, Protect, Detect, Respond, and Recover functions and producing gap analyses plus improvement roadmaps.

Guides security teams through cybersecurity assessments of oil and gas OT environments, covering refineries, pipelines, and production facilities while aligning with API 1164, TSA directives, IEC 62443, and NIST CSF requirements.

Guides structured cybersecurity assessments of electric power grid infrastructure, covering EMS/SCADA, substations, synchrophasor networks, and NERC CIP compliance to uncover protocol gaps and readiness for advanced threats like Industroyer.

A deep-dive curriculum into core memory corruption vulnerability classes, covering topics like stack/heap buffer overflows, Use-After-Free (UAF), integer overflows, and format strings. This guide uses real-world CVE case studies (e.g., QNAP, Chrome) to illustrate attack vectors, impact analysis, and modern mitigation techniques. Ideal for cybersecurity professionals, penetration testers, and students learning exploit development.