Skill UI

Determines an organization's role under the EU AI Act—provider, deployer, importer, distributor, or quasi-provider—and assesses Article 25 substantial modification risk. Useful for AI Act role questions, value-chain responsibilities, German terminology (Anbieter/Betreiber), and finetuning implications.

A fast preliminary triage and classification tool for the EU AI Act (Regulation 2024/1689). Assesses deployment context, organizational role, sector, and affected persons to determine if the AI Act applies and route to detailed compliance analysis.

An advanced AI co-counsel designed for family and divorce law attorneys. This scaffold assists with the entire matter lifecycle—from intake and financial disclosure to drafting, mediation, and court preparation. It supports structural analysis, document organization, and strategy, while maintaining strict ethical boundaries and emphasizing attorney oversight. It is designed to be jurisdiction-agnostic, handling various personal-status regimes.

This skill maps the full set of legal obligations under the EU AI Act (Regulation (EU) 2024/1689). It provides a detailed, actionable compliance matrix based on the user's specific organizational role (Provider, Deployer, etc.) and the assessed risk tier of the AI system. It includes RACI assignments and implementation priorities, helping users create a comprehensive compliance checklist.

This skill provides an analytical index of regulatory and doctrinal sources concerning the governance of French listed companies. It aggregates facts, statistics, and citations from key bodies like AMF, ESMA, and professional organizations. Its core principle is 'zero invention,' ensuring every output is rigorously source-cited to maintain objective, fact-based analysis, strictly distinguishing between legal obligations and soft law recommendations.

This skill maps an organization's entire identity fabric, identifying its tenant boundaries (federation mapping) and various Identity Providers (IdPs like Entra, Okta, ADFS, Google). It performs pre-authentication user enumeration and synthesizes login candidates using harvested names and confirmed email patterns. It is strictly for reconnaissance and mapping, never for credential submission or authentication bypass.

This skill helps organizations determine mandatory reporting duties, receiving authorities, and precise deadlines following a security incident, data breach, or vulnerability exploitation. It synthesizes reporting requirements from major EU regimes, including GDPR, NIS2, DORA, and the Cyber Resilience Act, providing a cited map of obligations based on the entity's role and location. It determines *what* must be reported, citing official legal texts.

An expert advisor for implementing, auditing, and achieving certification under ISO/IEC 42001:2023. This skill guides organizations (AI providers and users) through establishing an AI Management System (AIMS). It covers critical areas including AI risk assessment, AI impact assessments, responsible AI principles, governance framework setup, and preparing for formal ISO certification.

An expert advisory tool for navigating the EU NIS2 Directive (Directive (EU) 2022/2555) compliance requirements. It provides deep analysis on entity classification (Essential vs. Important), governance obligations (Art. 20), risk management gap assessments (Art. 21), and incident reporting timelines (Art. 23). Use it for organizational readiness, policy drafting, and alignment with standards like ISO 27001 and DORA across critical and essential digital infrastructure sectors.

A comprehensive guide designed to assess organizational compliance with the NIS2 Directive (EU 2022/2555). It guides users through scope determination, Art. 21 gap analysis across multiple risk management measures, and creates a prioritized compliance roadmap. Supports EU directives and deep national transpositions, including Germany (BSIG-neu) and profiles for other member states.

A comprehensive guide for authorized red team and penetration testing engagements, detailing techniques that exploit human trust and psychological vulnerabilities. Coverage includes pretexting, vishing, smishing, physical access attacks (e.g., badge cloning, tailgating), USB payload delivery, and OSINT-driven targeting. This methodology maps to key MITRE ATT&CK T-numbers, simulating real-world, multi-vector adversaries to test organizational defenses at the human layer.

This advanced tool maps an organization's complete internet footprint by tracing ownership directly from a legal entity (LEI), not just a single seed domain. It discovers owned domains, netblocks, ASNs, and subsidiaries, including 'dark' or unlinked IP space and M&A acquired assets. It provides auditable attribution scoring for robust intelligence gathering.