Skill UI

This skill equips the AI as an expert in Brazil's LGPD (General Data Protection Law). It provides structured guidance on legal bases for data processing (Art. 7º, Art. 11), conducting Data Protection Impact Assessments (RIPD), handling data incidents, managing data subject rights, and international data transfers. Ideal for compliance officers and legal teams.

An expert advisory tool for navigating the EU NIS2 Directive (Directive (EU) 2022/2555) compliance requirements. It provides deep analysis on entity classification (Essential vs. Important), governance obligations (Art. 20), risk management gap assessments (Art. 21), and incident reporting timelines (Art. 23). Use it for organizational readiness, policy drafting, and alignment with standards like ISO 27001 and DORA across critical and essential digital infrastructure sectors.

This skill helps assess and manage serious incidents involving high-risk AI systems under Article 73 of the EU AI Act. It covers incident qualification, reporting deadlines, authority notification, and cross-regulation mapping with GDPR and NIS2. Use it to evaluate reportability, draft notifications, or build incident response processes for legal and compliance teams.

This expert skill advises critical infrastructure owners and operators (pipelines, railroads, public transit) on complying with complex TSA cybersecurity directives. It provides deep knowledge of CRMP, CIP, CAP, IT/OT segmentation, and incident reporting protocols. Use it for gap assessments, policy drafting, and security architecture reviews related to transportation critical systems.

Close defects and incidents with a structured BUG RECEIPT output including VERIFIED, PARTIAL, or BLOCKED status. Establishes evidence boundary, traces root cause, makes responsible changes, and closes the proof loop with explicit checks and gaps.

This skill performs comprehensive security audits, threat modeling using STRIDE/PASTA, and infrastructure hardening. It supports Red/Blue Team exercises, OWASP compliance checks, code reviews, and incident response planning. Ideal for securing projects, identifying vulnerabilities, and ensuring robust security posture across development and operational environments.

Build AI-focused SRE incident response practices for LLM outages, degraded quality, runaway cost events, and safety regressions. Includes alert rules, playbooks, and severity framework.

Set up effective alerting rules, configure on-call rotations, and manage incident response workflows for production systems. Covers Prometheus alerting, Alertmanager routing, PagerDuty integration, and alert design best practices.

Configure Azure Monitor, Activity Logs, and Log Analytics for auditing. Set up diagnostic settings, policy enforcement, and KQL queries to meet compliance and investigate security incidents.

This skill covers implementing backup and recovery strategies using tools like rsync and Restic. It includes configuring cloud storage backends such as S3 and Backblaze B2, setting up automated scheduling with cron or systemd, and following the 3-2-1 rule for data protection. Learn how to encrypt backups, manage snapshots, and restore data after incidents.

An evidence-first procedure for system performance debugging, root-cause analysis and incident reports. Applies Brendan Gregg's USE and TSA methods to sweep resources and thread states, then drills down with off-CPU analysis and flame graphs, ending in triage notes, RCA reports or blameless postmortems.

This skill runs the Bumblebee scanner on macOS/Linux to perform read-only inventory and exposure checks. It detects compromised packages, developer tools, and host configurations against known security advisories. It is primarily used for supply-chain incident response and vulnerability assessment, providing developers with a clear picture of local system exposure.