Skill UI

This tool conducts comprehensive, sector-specific threat landscape assessments by analyzing designated threat actor patterns (e.g., APT groups, cybercriminals), common attack vectors, and industry-specific vulnerabilities. It is designed to provide actionable intelligence for risk management, security investment prioritization, and executive reporting across critical sectors like finance, healthcare, and energy.

This tool guides the process of reviewing security findings from DAST and SAST scanners. It uses the OWASP risk rating methodology to classify vulnerabilities (true positive, false positive, needs review) and calculate a comprehensive risk score based on likelihood and impact, ensuring development teams prioritize the most critical issues.

Grype is an open-source vulnerability scanner from Anchore. It inspects container images, filesystems, and SBOMs for known CVEs. It leverages Syft-generated SBOMs to match packages against multiple vulnerability databases (NVD, GitHub Advisories). Use it for security assessments, auditing, and integrating into CI/CD pipelines to enforce vulnerability standards and manage supply chain risks.

This tool parses Software Bill of Materials (SBOM) in CycloneDX and SPDX formats. It correlates components against the NVD CVE database to identify known supply chain vulnerabilities. Key features include building dependency graphs, calculating transitive risk scores, and generating compliance reports for regulatory assessment.

This tool automates the entire Privacy Impact Assessment (PIA) workflow. It systematically maps data flows, calculates privacy risk scores using established matrices (NIST PRAM, ICO DPIA), and checks compliance against major regulations like GDPR and CCPA/CPRA. It is essential for organizations launching new systems or preparing for regulatory audits to ensure data privacy compliance.

This advanced prompt simulates a Senior Project Manager and DevOps specialist. It takes comprehensive feature artifacts (PRD, technical breakdowns, testing plans) and generates a structured, automated GitHub project plan. It enforces Agile best practices (Epic > Feature > Story > Enabler > Task) and includes templates for issue creation, dependency management, risk assessment, and Definition of Done, ensuring robust project tracking within GitHub.

A comprehensive, 6-phase simulation of a C-suite boardroom meeting. This skill facilitates structured strategic deliberation across multiple executive domains (e.g., Finance, Product, Marketing). Key phases include independent thinking (isolation), cross-examination, and devil's advocate reviews. The output is a formal Board Memo detailing recommendations, vote tallies, explicit dissents, and critical risk assessments, ensuring robust decision-making.

Provides C-level strategic guidance for startups deciding on advanced AI implementation. Covers critical decisions including model build-vs-buy analysis (API vs. fine-tune vs. in-house), regulatory compliance risk assessment (EU AI Act, NIST RMF), economic modeling for self-hosting breakeven, and optimal AI team scaling. This is a high-level advisory tool, not a tactical engineering guide.

This skill performs a comprehensive compliance pressure test against the EU AI Act. It systematically assesses any AI system across six critical dimensions: prohibited practices, high-risk classification, conformity assessment, provider role definition, transparency obligations, and systemic risk, ensuring readiness for EU market deployment.

An operational compliance tool for the EU AI Act (Regulation (EU) 2024/1689). It assists compliance teams with three critical decisions: classifying AI risk tiers (prohibited, high, limited, minimal), planning conformity assessment routes for high-risk systems (Module A vs. Module H), and tracking role-specific obligations for providers, deployers, and importers. Provides article-cited guidance for system intake and regulatory planning.

This advanced skill provides comprehensive patent prior-art and landscape intelligence. Instead of generic searches, it forces the user to commit to one of five specialized sub-use-cases: Novelty Search, Freedom-to-Operate (FTO), Competitive Landscape, Acquisition Diligence, or Litigation Prior-Art. It searches multiple global databases (Google Patents, Espacenet, USPTO) and outputs a detailed, actionable DOCX report with strategic recommendations, risk assessments, and technical verdicts.

This skill provides comprehensive deal-desk support by performing quantitative scoring and risk assessment for commercial deals. It scores deals across margin, risk, and strategic value, routes discount requests to the correct human approver chain (e.g., Director, CFO, Legal), and flags contract landmines (e.g., uncapped indemnity, MFN) in redlined MSAs. It never auto-approves; every output is a score and a recommendation for a named human sign-off.