Skill UI

An expert assistant dedicated to ensuring compliance with GDPR and global data protection regulations. This skill covers auditing code and systems for violations, drafting compliant legal documents (like privacy policies and DPAs), answering complex compliance questions with authoritative GDPR article citations, and reviewing data flows for PII handling practices. It addresses both EU and UK GDPR requirements.

A comprehensive, stack-agnostic tool for deeply evaluating agent harnesses. It checks for broken code paths, redundant instructions, and the overall usefulness of agent logic using a structured, multi-stage dual-judge protocol. The process involves high-priority questionnaires (Q1, Q2) before running three defined tracks: A (Correctness), B (Redundancy), and C (Usefulness). Ideal for auditing complex agent systems before deployment or major refactoring.

This expert skill provides comprehensive assistance for Information Security Management System (ISMS) compliance based on ISO 27001 (2013/2022). It is ideal for security and compliance teams needing support with gap analysis, risk assessment, policy drafting, Statement of Applicability (SoA) generation, and auditing preparation. It covers all mandatory clauses and Annex A controls.

An expert advisor for implementing, auditing, and achieving certification under ISO/IEC 42001:2023. This skill guides organizations (AI providers and users) through establishing an AI Management System (AIMS). It covers critical areas including AI risk assessment, AI impact assessments, responsible AI principles, governance framework setup, and preparing for formal ISO certification.

A systematic methodology for performing offensive cryptographic analysis. This skill focuses on identifying and exploiting flaws arising from the misuse of cryptographic primitives in real-world applications, rather than breaking the underlying math. Techniques covered include Padding Oracle Attacks (CBC), ECB block manipulation, Hash Length Extension, RSA weaknesses, and PRNG exploitation. Ideal for penetration testing and deep security auditing.

This guide assists organizations in two primary functions: auditing the compliance status of an existing internal whistleblower system, or drafting a comprehensive reporting policy from a dedicated template. It incorporates major international and regional legal requirements, including the EU Directive 2019/1937, the amended Sapin II Law, and CNIL guidelines, ensuring robust internal governance and risk management.

This skill assists in constructing or auditing formal models for the Journal of Systems Engineering. It ensures consistency among system boundaries, variables, constraints, objectives, and information structures. It guides users to define actors, timing, and assumptions rigorously, checking for identifiability and solvability before submission.

Skill for designing and auditing theoretical results (propositions, theorems, equilibria, stability) for the Journal of Systems Engineering, ensuring formal results explain system mechanisms rather than merely containing formulas.

Performs static security analysis on GitHub Actions workflows that incorporate AI coding agents (e.g., Claude, Gemini, OpenAI). This skill helps identify critical data flow vulnerabilities, such as where attacker-controlled input can reach AI agent prompts or internal systems via CI/CD pipelines, going beyond simple expression checks.

This comprehensive skill serves as an entry point for all web UI design needs, covering components, pages, dashboards, and advanced layouts using React, Vue, or pure HTML/CSS. It addresses not only aesthetics and polish (color, typography, spacing) but also deep structural concerns like responsive design, UX auditing, and visual system implementation. Use it whenever a user asks to improve the look, feel, or function of a digital interface.

This skill allows users to build and maintain complex UI components and full screens directly within Figma using the Figma MCP. It rigorously enforces a defined design system (like Rayna UI) by validating design tokens, applying craft rules, detecting anti-patterns, and ensuring visual consistency. Ideal for creating new components, composing entire dashboards or landing pages, or auditing existing files for compliance.

This skill provides a structured approach to systematically identify security threats by applying the STRIDE methodology (Spoofing, Tampering, Repudiation, Information Disclosure, Denial of Service, Elevation of Privilege). It is crucial for conducting thorough threat modeling sessions, analyzing system architectures, reviewing security design decisions, and creating robust security documentation for compliance and auditing purposes.