Skill UI

Provides an OWASP 2025-aligned vulnerability scanning mindset, supply chain defenses, attack surface mapping, and risk prioritization guidance with runtime scripts for automated validation of modern application security.

Creates a structured vulnerability scanning workflow that uses Nessus, Qualys, or OpenVAS to discover, prioritize, and track remediation across infrastructure, integrates scan results with SIEM and dashboards, and defines cadence, risk-based prioritization, and SLA-driven remediation tracking for SOC teams.

Structured patch governance for OT/ICS environments, covering vendor testing, risk-based prioritization, staged deployment, rollback planning, compensating controls, and scheduling during constrained maintenance windows.

Combine the CISA KEV catalog with EPSS, CVSS, asset criticality, and network exposure to drive a risk-based CVE prioritization workflow for faster remediation of exploited vulnerabilities.

This domain-agnostic skill ranks impediments, risks, and gaps by using a specialized value-stream scoring model. It evaluates countermeasures based on four criteria: Return on Investment (ROI), Cost to Implement, Ease of Deployment, and Risk Factor. A proprietary formula calculates a final Priority score (1-100), allowing users to quickly determine the optimal sequence for remediation, improvement backlogs, or triage items.