Skill UI

Structured patch governance for OT/ICS environments, covering vendor testing, risk-based prioritization, staged deployment, rollback planning, compensating controls, and scheduling during constrained maintenance windows.

Guides security teams through implementing PCI DSS 4.0.1 controls, from scoping and network hardening to access, monitoring, and governance, to keep cardholder data protected.

Guides on enforcing zero trust access for SaaS apps using CASB, SSPM, conditional access, OAuth governance, and session controls to verify identity, ensure compliant devices, and protect sensitive cloud data.

Conduct structured access reviews and certifications—defining campaign scope, selecting reviewers, prioritizing risks, and tracking remediation—to prove compliance during audits and governance-focused assessments.

AegisOps-AI is a professional-grade 'Living Pipeline' that integrates advanced AI reasoning directly into the SDLC. It acts as an intelligent gatekeeper, automating high-stakes audits across three domains: identifying memory vulnerabilities in Linux Kernel patches, detecting massive cost drifts in Terraform plans, and translating natural language security intent into hardened Kubernetes manifests.

Helps teams treat prompts like production code by providing registry, eval, and governance workflows for versioning, testing, and promoting prompts safely across environments.

A governance skill designed to secure AI agent tool calls using advanced authorization policies. It implements Cedar policies to control which tools agents can access and under what conditions. Key features include running in 'Shadow mode' for safe observation, 'Enforce mode' for strict blocking, and generating cryptographically signed Ed25519 receipts to provide an immutable, tamper-evident audit trail for every policy decision.

Provides comprehensive patterns and techniques for securing AI agent systems. Learn how to enforce governance policies, including tool allow/block lists, content filtering, rate limiting, and human approval workflows. Essential for building robust, compliant, and trustworthy agents in multi-agent or production environments that interact with external APIs and sensitive data.

Checks AI agent implementations against the OWASP Agentic Security Initiative Top 10 risks, producing findings on controls, vulnerabilities, and recommendations for prompt injection, tool governance, escalation, logging, identity, policy, supply chain, and behavioral monitoring before production or audit.

This toolkit provides comprehensive automation capabilities for Confluence platforms via Rube MCP. It allows users to automate the entire documentation lifecycle, including creating and updating pages, performing advanced content searches using CQL, managing spaces, and applying labels efficiently. Ideal for teams needing to streamline knowledge base maintenance and content governance.

Generates a concise, AI-optimized specification describing what an existing GitHub Actions workflow does, its triggers, requirements, inputs/outputs, and governance so teams can understand and maintain it without implementation details.

This skill provides comprehensive governance for Power Automate flows and Power Apps. It allows users to classify flows by business impact, detect orphaned resources, audit connectors, and enforce compliance by writing essential metadata to a cached store. It is ideal for IT governance teams needing centralized control and deep insight into automation assets without relying on Dataverse or the CoE Starter Kit.