Skill UI

This skill generates a comprehensive, structured threat model for any given service or feature using the STRIDE framework. It guides users through identifying critical assets, defining trust boundaries, enumerating specific threats (Spoofing, Tampering, Repudiation, Information Disclosure, Denial of Service, Elevation of Privilege), assessing risk, and proposing concrete mitigation controls. Ideal for security design reviews and documentation.

Generates a structured, multi-section checklist and review framework for assessing tax efficiency for individuals and businesses. It covers key areas including income allowances, pension planning, capital gains tax, corporate reliefs (e.g., R&D, AIA), VAT, and estate planning. Use this tool when conducting year-end reviews or identifying tax-saving opportunities. Note: This is a framework for discussion, not qualified tax advice.

A comprehensive framework for assessing the operational and cultural health of a team. It covers key dimensions such as delivering value, morale, psychological safety, and release capability. Use this guide for structured retrospectives, leadership reviews, or post-incident analyses to identify root causes and generate actionable improvement plans.

This skill provides comprehensive guidance for developing professional, interactive, and distributable Power BI developer visuals (.pbiviz). It covers the entire workflow using the pbiviz toolchain, including scaffolding the project, implementing the IVisual class using TypeScript, managing the formatting model, live-previewing, packaging, certifying, and finally publishing the visual to AppSource.

An adversarial Quality Assurance (QA) pass designed to deep-dive into any codebase for logic errors, security flaws, and functional bugs. Instead of confirming that code 'looks right,' this skill actively attempts to break the code by simulating hostile inputs, tracing critical data paths, and checking for subtle, real-world correctness issues. Essential for high-stakes, critical code reviews.

This skill guides users through structured, adaptive learning experiences for any topic. It diagnoses the user's current knowledge level and goal to create a personalized study path. It utilizes techniques like worked examples, retrieval questions, and spaced repetition to ensure deep understanding, making it ideal for self-study, skill acquisition, or subject review.

This skill generates comprehensive, academic-style survey papers as a single, self-contained HTML file. By reading an anchor resource and curating research data, it structures the content and utilizes advanced LLMs (like Kimi K2.6 via Fireworks) to generate all prose, figures, and bibliographies, suitable for rapid academic literature review.

This tool automates the OAuth 2.0 scope minimization review process. It identifies over-permissioned third-party application integrations, excessive API scopes, and risky OAuth consent patterns across identity providers. It is crucial for security audits, compliance (GDPR, SOC 2), and enforcing the least-privilege principle for cross-boundary data access.

A comprehensive framework for managing third-party risk (TPRM) throughout the entire vendor lifecycle. This tool guides users through inventory, risk tiering, running due diligence questionnaires (SIG, CAIQ), reviewing security evidence (SOC 2, ISO 27001), codifying requirements in contracts, and establishing continuous monitoring protocols. It is essential for maintaining compliance, managing supply chain risk, and securing data handled by external vendors.