Skill UI

This skill teaches the critical principles and decision-making processes for safe production releases. It covers platform selection (e.g., Kubernetes, Vercel), mandatory pre-deployment verification (Code Quality, Environment), structured workflows (Prepare, Backup, Deploy, Verify), and advanced strategies like Blue-Green and Canary deployments. Focuses on thinking through risk mitigation, not just executing scripts.

This central skill specializes in performing comprehensive threat modeling using STRIDE and calculating risk via DREAD scoring. It guides users through defining scope, identifying threats, and planning mitigations for new architectures. Crucially, it acts as a security router, directing specialized requests—such as pen-testing, incident response, cloud posture checks, and AI security reviews—to the appropriate dedicated skill.

This skill maps identified security threats to appropriate controls and mitigation strategies. It is essential for prioritizing security investments, building comprehensive remediation roadmaps, validating existing control coverage, and performing detailed risk treatment planning. It helps organizations design robust, defense-in-depth security architectures.

Assesses AI/ML models and datasets for ethical risks, fairness concerns, and bias, generating reports and mitigation guidance via the ai-ethics-validator plugin whenever a user requests an ethics review or bias detection.

Outlines principles and practices for building secure contracts, covering threat modeling, vulnerability mitigation, and deployment readiness to help teams reduce risk when launching automated agreements.

Placeholder skill entry for risk modeling workflows that outlines basic analytics and scenario planning used to quantify potential losses and guide mitigation decisions.

This tool analyzes historical network traffic baselines to design secure and functional segmentation architectures for Operational Technology (OT) environments. It helps map flat Purdue-model networks into secure zones (VLANs) and automatically generates required firewall rules based on observed legitimate communication paths, adhering to standards like IEC 62443. Ideal for IT/OT convergence and risk mitigation.

Conducts a comprehensive, structured ethical review for any AI or ML model, feature, or product. It assesses risks related to fairness, bias, transparency, privacy, and societal impact, providing a risk tier score, necessary mitigations, and governance documentation suitable for pre-deployment compliance.

This skill generates a comprehensive, cross-functional Go-to-Market (GTM) plan for any product launch, feature release, or new market entry. It helps align Product, Marketing, Sales, and Support teams by defining launch tiers (Major, Feature, Incremental), core messaging, operational activities, success metrics, and risk mitigation strategies. Ideal for pre-launch strategy, ensuring cross-departmental coordination, and defining measurable success criteria.

This skill generates a comprehensive risk register for projects, programs, or products. It applies standard risk management practices, including likelihood/impact scoring, RAG status, and detailed mitigation/contingency plans. Ideal for preparing reports for project boards, steering committees, and programme management offices.

This skill generates a comprehensive, structured threat model for any given service or feature using the STRIDE framework. It guides users through identifying critical assets, defining trust boundaries, enumerating specific threats (Spoofing, Tampering, Repudiation, Information Disclosure, Denial of Service, Elevation of Privilege), assessing risk, and proposing concrete mitigation controls. Ideal for security design reviews and documentation.

This skill generates a clear, scannable, and comprehensive sprint brief for Agile teams. It structures critical information including the specific sprint goal, business rationale, grouped scope, critical path items, potential risks with mitigation plans, and the Definition of Done. It ensures all cross-functional team members (Engineers, Designers, PMs) are aligned on the sprint's focus and objectives.