Skill UI

This guide outlines a systematic process for transforming any recurring technical pattern, complex debugging solution, or workflow into a standalone, portable skill. It details the multi-step extraction workflow, including pattern identification, structured documentation generation (SKILL.md), and quality control checks to ensure the skill can be reused across different projects.

This specialized skill acts as an expert AI auditor for Food Safety Modernization Act (FSMA) compliance. It is designed to review critical records, including HACCP plans, Preventive Controls, and Supply Chain documentation for food processing facilities. Use it to simulate FDA inspections, identify compliance gaps (such as missing CCPs or inadequate corrective actions), and receive actionable guidance to ensure the highest standards of food safety.

A lightweight integration providing full read/write access to Google Slides presentations. This tool allows users to programmatically create, inspect, modify, and extract content (including text and tables) from Google Workspace documents. Perfect for local automation tasks requiring full control over presentation structure and content without needing a dedicated server.

This assistant is an expert guide for developing user interfaces using the Makepad framework. It helps users write, explain, and troubleshoot code for a comprehensive set of widgets, including containers (View, PortalList), input controls (TextInput, Slider), navigation elements (TabBar, Modal), and media components. It adheres to best practices, providing structured code patterns and detailed usage documentation for building complex, modern UIs.

A comprehensive workflow for performing static and dynamic analysis of malicious PDF documents. It utilizes tools like peepdf, pdfid, and pdf-parser to extract embedded JavaScript, shellcode, and suspicious objects. Ideal for triaging phishing attachments, analyzing exploit documents, and building threat signatures in a controlled forensic environment.

This system provides a structured workflow for tracking security vulnerability exceptions and formally accepting related risks. It mandates documentation of compensating controls, manages required approval chains, and automatically handles expiration based on defined Service Level Agreements (SLAs). Essential for maintaining compliance and visibility into accepted risks, supporting frameworks like PCI DSS, SOC 2, and NIST CSF.

Provides comprehensive, end-to-end guidance for establishing and maintaining an Information Security Management System (ISMS) compliant with ISO/IEC 27001:2022. This framework covers critical phases including gap analysis, detailed risk assessment methodology, selecting and documenting Annex A controls, creating the Statement of Applicability (SoA), and preparing for internal and external certification audits.

A comprehensive tool designed for assessing the security posture of Programmable Logic Controller (PLC) firmware. It specializes in detecting critical vulnerabilities such as hardcoded credentials, undocumented debug interfaces, backdoor functions, and memory corruption flaws. The tool supports analyzing major industrial platforms (Siemens, Allen-Bradley) by performing static and dynamic analysis, and verifying firmware integrity against known-good baselines, adhering to standards like IEC 62443. Use only in authorized lab environments.

Develops comprehensive profiles for Advanced Persistent Threat (APT) groups, criminal organizations, and hacktivist collectivities. This tool aggregates TTP documentation, campaign data, and attribution indicators from major intelligence sources (MITRE ATT&CK, Mandiant, CrowdStrike) to help organizations update threat models, prioritize defensive controls, and prepare executive briefings on sector-specific risks.

Automates the complex pre-development workflow for large-scale system transformations, such as major rewrites, migrations, or overhauls. This skill performs comprehensive project analysis, task decomposition, planning document generation, and sets up detailed progress tracking across multiple phases, ensuring a structured approach before any coding begins. It supports adaptive control and integrates robust task tracking via GitHub or local files.

A comprehensive skill for creating technical and scientific documentation using Markdown as the source format, enhanced by embedded Mermaid diagrams. This method establishes text-based diagrams as the canonical standard, ensuring that all visualizations are clean, editable, and highly readable in version control systems like Git. It is ideal for generating reports, architectural diagrams, workflows, and any content that requires cross-platform rendering and version history.

This skill allows users to manage Box cloud storage as if it were a local filesystem. It supports two modes: transparent auto-syncing via hooks (on Write/Edit) and explicit operations using the Box CLI. It provides structured workflows for document management, collaborative syncing, and reliable version control.