Skill UI

Provides auto-triggered guidance for creating enterprise risk assessments, covering workflows that span governance, compliance, project management, and integration best practices while validating outputs for production readiness.

This skill acts as an expert risk manager, providing comprehensive guidance on monitoring portfolio risk, calculating R-multiples, and optimizing position limits. It covers advanced quantitative finance topics such as Value at Risk (VaR), correlation analysis, and stress testing using Monte Carlo simulations. Use it for systematic risk assessment, developing hedging strategies (options/futures), and implementing rigorous risk controls in trading workflows.

This skill specializes in transforming theoretical threat models, risk assessments, and business context into concrete, actionable security requirements. It is essential for writing detailed security user stories, defining robust acceptance criteria, building comprehensive security test cases, and ensuring compliance requirement mapping. Use it when bridging the gap between identifying a vulnerability and specifying how the system must be secured.

This skill generates comprehensive Technical Design Documents (TDDs), guiding users through structuring architectural decisions, implementation plans, and risk assessments. It follows industry best practices from standards like Google Design Docs, RFC patterns, and ADRs. It focuses on high-level contracts and architectural 'what' and 'why', rather than specific, low-level implementation code.

A specialized skill for conducting comprehensive security architecture reviews, risk assessments, and threat identification. It masters advanced methodologies like STRIDE, PASTA, and attack tree construction. Use this to build secure-by-design systems, identify potential attack vectors, and strengthen system resilience before deployment.

Guide teams through a structured PESTEL assessment of external political, economic, social, technological, environmental, and legal forces to surface risks and opportunities for product strategy, market entry, and long-term planning.

A comprehensive tool for analyzing long-term health data, tracking trends across multiple dimensions such as weight, vital signs, symptoms, medication adherence, lab results, and mood. It identifies significant changes, correlations between lifestyle factors and health metrics, and provides data-driven insights, risk assessments, and predictive recommendations for proactive health management.

A comprehensive, cross-functional diagnostic tool that assesses overall organizational health across eight critical dimensions, including Financial, Product, People, and Engineering. It uses traffic-light scoring and industry benchmarks to provide deep, actionable insights, making it ideal for board reviews, risk assessment, and monitoring company vitality.

Analyze travel health risks for destinations, recommend vaccines and travel medicine, and generate multilingual emergency medical cards using WHO/CDC-style guidance. Useful for pre-trip planning, risk assessment, and post-travel monitoring.

This script provides a comprehensive security assessment of Microsoft Entra ID (Azure AD) identity configurations. It audits for risky authentication policies, overly permissive role assignments, stale accounts, conditional access gaps, and guest user risks using PowerShell and Graph API. Ideal for compliance audits, security posture review, and post-merger security assessments.

This skill guides the creation of high-quality, finished cyber threat intelligence reports. It tails content for specific audiences—from C-suite executives (strategic risk) to SOC analysts (tactical IOCs). Use it when synthesizing raw data into actionable intelligence products, generating threat briefings, or conducting post-incident assessments, ensuring adherence to industry standards like TLP and NIST.

Provides comprehensive, end-to-end guidance for establishing and maintaining an Information Security Management System (ISMS) compliant with ISO/IEC 27001:2022. This framework covers critical phases including gap analysis, detailed risk assessment methodology, selecting and documenting Annex A controls, creating the Statement of Applicability (SoA), and preparing for internal and external certification audits.