Skill UI

A structured framework for performing initial security incident triage. It guides analysts through classifying incident types using established standards like NIST SP 800-61r3, assigning business impact severity (P1-P4), enriching alerts with threat intelligence, and determining containment and escalation paths. Use when SIEM/EDR alerts require human judgment or when coordinating multiple concurrent security events.

A comprehensive guide to building a structured incident response playbook for ransomware attacks. It aligns with the CISA StopRansomware Guide and NIST CSF, covering all phases from preparation and detection to containment, eradication, and recovery. Ideal for security teams conducting readiness assessments or updating compliance documentation.

Assesses organizational readiness for migrating cryptographic systems to post-quantum standards (PQC), aligning with NIST guidelines. The tool performs comprehensive cryptographic inventory scanning to identify quantum-vulnerable algorithms (RSA, ECDH, ECDSA) and evaluates the feasibility of implementing hybrid TLS configurations using standards like ML-KEM and ML-DSA. Essential for implementing crypto-agility across enterprise infrastructure.

This tool automates the entire Privacy Impact Assessment (PIA) workflow. It systematically maps data flows, calculates privacy risk scores using established matrices (NIST PRAM, ICO DPIA), and checks compliance against major regulations like GDPR and CCPA/CPRA. It is essential for organizations launching new systems or preparing for regulatory audits to ensure data privacy compliance.

Guides teams through classifying and triaging declared security incidents, scoring severity, filtering false positives, routing escalations, and starting forensic collection consistent with NIST SP 800-61.

AgentFlow transforms your existing Kanban board (Asana, GitHub, Linear) into a self-managing, autonomous AI development pipeline. It orchestrates multiple AI agents through defined stages (Backlog to Done), enforcing deterministic quality gates, performing adversarial reviews, and tracking costs—all visible within your existing project management UI. It provides crash-proof execution and full observability for complex software development lifecycles.

A comprehensive toolkit for building robust, structured logging pipelines in Golang. It provides advanced modules for handler composition (slog-multi), throughput control (slog-sampling), attribute transformation (slog-formatter), and integrates with major backend logging sinks (e.g., Sentry, Loki, Datadog, Elasticsearch). Use this when building complex Go applications that require deterministic log routing, sampling, and data sanitization.

Command-line wrapper around the Google Workspace Admin SDK that fetches audit logs, activity streams, and usage reports (customer, entity, user) for administrators, with schema inspection helpers to craft --params and --json flags.

Use the gws people CLI to manage Google People contacts, contact groups, other contacts, and domain directory data through batch operations, searches, and updates—ideal for automating contact administration and sync workflows.

A comprehensive tool for managing structured knowledge bases within Lark/Feishu. It allows users to create, list, and organize knowledge spaces, manage the hierarchy of document nodes, and handle membership administration. Ideal for professionals needing to structure, archive, or modify corporate knowledge documentation and collaboration structures.

A comprehensive guide for deploying, configuring, and maintaining the OpenViking server in production environments. It covers service configuration management, environment setup using `uv` for virtual environments, reliable startup procedures using `nohup`, graceful shutdown methods, and critical data cleanup workflows. This resource is essential for DevOps engineers and system administrators managing OpenViking services.

Persona for IT administrators to monitor Workspace security, configure Drive sharing policies, and run workflows for standup reporting and audit review while emphasizing dry-run checks and auth-status verification.