Skill UI

A comprehensive expert playbook detailing advanced Large Language Model (LLM) prompt injection techniques. Covers direct methods (instruction override, role play), indirect attacks (RAG poisoning, web data manipulation), and sophisticated tool/function calling abuse for data exfiltration and security bypass. Essential for rigorous AI application security testing.

A comprehensive methodology for identifying critical vulnerabilities in transactional applications (e-commerce, fintech, SaaS). This goes beyond standard OWASP Top 10 checks, focusing on flaws like workflow bypass, state machine violations, price manipulation, and role boundary abuse. It guides testers to map application flows, identify hidden endpoints, and quantify the potential financial impact of logic failures.

This tool serves as a Codex CLI alias implementing the P10 protocol, simulating the role of a P10/CTO. It is designed to assist users in defining macro-level strategic corporate direction, mapping complex organizational topologies, and establishing management boundaries for lower levels (P9). It is ideal for high-level strategic planning and decision-making simulation.

A specialized CLI alias designed to implement the PUA P9 protocol, simulating the role of a P9 tech lead for AI coding assistance (Codex/Claude Code). This tool helps users structure complex development tasks by focusing on writing precise prompts, managing execution steps, and strictly adhering to a defined professional protocol, minimizing direct code implementation unless reassigned. It ensures rigorous process management and evidence-based output.

A comprehensive guide detailing best practices for securing Quarkus applications. It covers robust authentication methods like JWT and OIDC, role-based access control (RBAC) for authorization, mandatory input validation using Bean Validation, preventing SQL injection, and secure secret management. Essential for developers building highly secure Java microservices.

A comprehensive, 6-phase simulation of a C-suite boardroom meeting. This skill facilitates structured strategic deliberation across multiple executive domains (e.g., Finance, Product, Marketing). Key phases include independent thinking (isolation), cross-examination, and devil's advocate reviews. The output is a formal Board Memo detailing recommendations, vote tallies, explicit dissents, and critical risk assessments, ensuring robust decision-making.

This rigorous review simulates an interrogation by a Chief AI Officer (CAIO). It pressure-tests any AI plan across six critical dimensions: evaluation metrics, failure mode handling (SLOs), international regulatory compliance (e.g., EU AI Act), technical architecture (API vs. fine-tuning), cost economics, and necessary team roles. Use this when ensuring AI features are robust, safe, and commercially sound before launch or major investment.

The single command entry point for founders' strategic queries. It automatically analyzes keywords and intent (e.g., 'burn rate' or 'pipeline') to route the question to the most specialized C-level advisor (CFO, CRO, CMO, etc.), or convene a multi-role boardroom if multiple functions are involved. It eliminates the cognitive burden of needing to remember multiple complex slash commands.

This skill performs a comprehensive compliance pressure test against the EU AI Act. It systematically assesses any AI system across six critical dimensions: prohibited practices, high-risk classification, conformity assessment, provider role definition, transparency obligations, and systemic risk, ensuring readiness for EU market deployment.

An operational compliance tool for the EU AI Act (Regulation (EU) 2024/1689). It assists compliance teams with three critical decisions: classifying AI risk tiers (prohibited, high, limited, minimal), planning conformity assessment routes for high-risk systems (Module A vs. Module H), and tracking role-specific obligations for providers, deployers, and importers. Provides article-cited guidance for system intake and regulatory planning.

This advanced skill manages complex, large-scale development tasks by coordinating multiple, specialized subagents in parallel. It systematically decomposes the goal into isolated missions, manages resource quotas (token usage), and handles error recovery across multiple files and components. Ideal for large feature builds, system refactoring, or complex applications requiring multiple, concurrent roles (Planner, Builder, Tester).

This skill conducts a comprehensive audit to identify and prioritize automation opportunities within a user's existing workflow. It guides users through a structured intake (covering roles, repetitive tasks, and pain points) and systematically scans connected tools (like Gmail, Slack, Calendar, and CRMs) to surface actionable, ranked quick wins, minimizing implementation effort and maximizing impact.