Skill UI

This skill specializes in transforming theoretical threat models, risk assessments, and business context into concrete, actionable security requirements. It is essential for writing detailed security user stories, defining robust acceptance criteria, building comprehensive security test cases, and ensuring compliance requirement mapping. Use it when bridging the gap between identifying a vulnerability and specifying how the system must be secured.

This skill generates comprehensive Technical Design Documents (TDDs), guiding users through structuring architectural decisions, implementation plans, and risk assessments. It follows industry best practices from standards like Google Design Docs, RFC patterns, and ADRs. It focuses on high-level contracts and architectural 'what' and 'why', rather than specific, low-level implementation code.

A specialized skill for conducting comprehensive security architecture reviews, risk assessments, and threat identification. It masters advanced methodologies like STRIDE, PASTA, and attack tree construction. Use this to build secure-by-design systems, identify potential attack vectors, and strengthen system resilience before deployment.

Guide teams through a structured PESTEL assessment of external political, economic, social, technological, environmental, and legal forces to surface risks and opportunities for product strategy, market entry, and long-term planning.

This advanced builder guides C-suite executives in creating comprehensive, narrative-driven decks for board meetings, investor updates, and fundraising pitches. It mandates a structured approach covering key metrics, finance, product roadmap, risk assessment, and strategic outlook. Learn to build a compelling story—not just present data—and master the art of delivering bad news credibly.

A comprehensive tool for analyzing long-term health data, tracking trends across multiple dimensions such as weight, vital signs, symptoms, medication adherence, lab results, and mood. It identifies significant changes, correlations between lifestyle factors and health metrics, and provides data-driven insights, risk assessments, and predictive recommendations for proactive health management.

A cross-functional tool for modeling complex, cascading 'what-if' scenarios. Unlike simple single-variable stress tests, this system simulates compound adversity across all business domains simultaneously (e.g., combining revenue loss, funding delays, and key personnel exits). Ideal for strategic planning, major downside risk assessment, or anticipating complex, interconnected market crises.

Analyze travel health risks for destinations, recommend vaccines and travel medicine, and generate multilingual emergency medical cards using WHO/CDC-style guidance. Useful for pre-trip planning, risk assessment, and post-travel monitoring.

Guides security teams through PowerShell, Microsoft Graph, Azure CLI, and ScoutSuite checks to audit Microsoft Entra ID configurations, highlighting risky authentication policies, overprivileged roles, stale accounts, and conditional access gaps during assessments.

Audit Google Cloud IAM using gcloud CLI, Policy Analyzer, and IAM Recommender to flag over-privileged bindings, primitive roles, service-account keys, and cross-project risks during security assessments and compliance reviews.

Guides teams through planning, implementing, auditing, and certifying an ISO/IEC 27001:2022 information security management system, covering scope definition, risk assessment, Annex A control selection, Statement of Applicability, and continuous improvement practices.

Implements MITRE ATT&CK-based threat modeling to map adversary TTPs, evaluate detection coverage, and prioritize defensive investments for SOCs, new environments, purple team exercises, and risk assessments.