Skill UI

Automates 21risk workflows through Composio's 21risk toolkit via Rube MCP, guiding users to discover tools, verify active connections, and run schema-compliant executions with explicit memory and session management.

This skill scans session management code to spot insecure IDs, missing expirations, and fixation risks, then summarizes findings and remediation steps for developers needing a session-security audit.

This structured workflow guides the systematic, low-risk modernization of legacy systems using the Strangler Fig pattern. It provides a phased approach, starting with comprehensive assessment (risk, dependency mapping), establishing robust test coverage (contract testing, data management), and implementing incremental migration infrastructure (API gateways, feature flags) to ensure continuous business operation during the transition.

This tool generates comprehensive trading signals by analyzing multiple technical indicators (RSI, MACD, Bollinger Bands, etc.) across various assets. It combines indicators to produce composite BUY/SELL signals, complete with confidence scores and risk management levels. Use it when analyzing crypto or stock assets to identify high-potential trading entry or exit points.

HR-Pro is a comprehensive, ethical, and compliance-aware subagent designed to guide users through the entire employee lifecycle. It provides best practices, standardized checklists, and templates for key HR processes, including hiring and recruiting, onboarding/offboarding, performance management, PTO/leave policy, and complex employee relations. It prioritizes legal compliance and minimizing bias, while always advising consultation with local legal counsel for high-risk actions.

A comprehensive skill for implementing and managing Information Security Management Systems (ISMS) aligned with ISO 27001:2022 and global regulatory standards. This tool guides users through critical security processes, including risk assessments, control implementation, gap analyses, and preparing for audits. Essential for HealthTech and MedTech companies ensuring data privacy and compliance.

Provides ISO 27001 ISMS audit and certification guidance, covering program planning, risk-based execution, Annex A control assessment, finding management, and Stage 1/Stage 2 documentation support for compliance teams.

This guide outlines best practices for securing PostHog API keys. It differentiates between low-risk Project keys and high-privilege Personal keys, detailing methods for implementing least-privilege access, scoped key creation, secure rotation procedures, and leak prevention using environment variables, pre-commit hooks, and server-side isolation.

This comprehensive guide provides expertise in conducting ISO 13485 internal audits for medical device Quality Management Systems (QMS). It covers the full audit lifecycle, including risk-based planning, systematic evidence collection, classifying nonconformities (Major/Minor), and managing CAPA verification to ensure regulatory compliance and continuous improvement.

Provides auto-triggered guidance for creating enterprise risk assessments, covering workflows that span governance, compliance, project management, and integration best practices while validating outputs for production readiness.

A comprehensive guide for implementing ISO 14971:2019 risk management across the entire medical device lifecycle. Covers planning, hazard identification, risk analysis (FMEA, FTA), risk evaluation, risk control, and post-market surveillance. Essential for achieving regulatory compliance in medical device development.

This skill acts as an expert risk manager, providing comprehensive guidance on monitoring portfolio risk, calculating R-multiples, and optimizing position limits. It covers advanced quantitative finance topics such as Value at Risk (VaR), correlation analysis, and stress testing using Monte Carlo simulations. Use it for systematic risk assessment, developing hedging strategies (options/futures), and implementing rigorous risk controls in trading workflows.