Skill UI

A comprehensive toolkit for modern product management. It guides users through essential workflows, including feature prioritization using RICE, deep customer discovery analysis from interviews, and structured PRD creation. Ideal for defining product strategy, synthesizing user research, and documenting requirements from concept to launch.

Guides optimizing account signup, registration, and trial activation flows to reduce friction, improve completion rates, and drive activation with principles covering field prioritization, trust signals, multi-step best practices, and mobile considerations.

Provides an OWASP 2025-aligned vulnerability scanning mindset, supply chain defenses, attack surface mapping, and risk prioritization guidance with runtime scripts for automated validation of modern application security.

Query gnomAD via GraphQL to retrieve allele frequencies, constraint scores, and loss-of-function annotations for population-informed variant interpretation and rare disease gene prioritization.

Guides product managers through choosing the right prioritization approach (RICE, ICE, Value/Effort, etc.) by asking adaptive questions about stage, team context, stakeholder needs, and decision cadence, then delivers tailored implementation guidance.

Guides product managers through strategic roadmap planning by orchestrating prioritization, epic definition, stakeholder alignment, and release sequencing into a structured workflow that turns strategy into executable outcomes and keeps stakeholders aligned.

Guides product teams through hypothesis writing, metric definition, sample-size planning, ICE prioritization, and statistical interpretation so experiments stay practical, defensible, and aligned with business decision thresholds.

A comprehensive guide to building an automated Indicator of Compromise (IOC) enrichment pipeline using OpenCTI. This skill teaches how to leverage OpenCTI's native STIX 2.1 model and internal connectors to pull deep context from major external threat intelligence sources like VirusTotal, Shodan, AbuseIPDB, and GreyNoise. The pipeline automatically enriches newly ingested indicators, correlates them with known threat actors and campaigns, and generates confidence scores for rapid analyst prioritization.

This skill automates the process of vulnerability prioritization by querying the FIRST Exploit Prediction Scoring System (EPSS) API. It calculates the real-world probability of a CVE being exploited within 30 days, providing a crucial risk metric that surpasses traditional CVSS severity scoring. Use it for risk-based vulnerability management, allowing security teams to efficiently triage and remediate the most actively threatened vulnerabilities first.

This skill guides the systematic process of conducting access reviews and certifications. It covers designing review campaigns, risk-based prioritization (e.g., privileged access), reviewer assignment, and remediation tracking. Essential for maintaining compliance with major regulations like SOX, HIPAA, and PCI DSS, ensuring user access strictly matches their job roles.

Implements a robust, multi-factor model to calculate the criticality score of IT assets. The scoring incorporates data sensitivity, business function dependency, regulatory scope, and network exposure, moving beyond simple CVSS scores. The resulting 1-5 criticality tier directly modifies vulnerability remediation Service Level Agreements (SLAs), ensuring security resources are focused on the organization's most valuable and risky systems.

This skill provides a comprehensive framework for vulnerability prioritization by combining three crucial data points: CISA's Known Exploited Vulnerabilities (KEV) catalog (confirming real-world exploitation evidence), EPSS scores (predicting exploitation probability), and CVSS metrics (assessing intrinsic severity). It builds a multi-factor prioritization engine to determine the most critical CVEs for immediate remediation, assisting security teams in managing large vulnerability backlogs efficiently.