Skill UI

This skill provides an expert framework for conducting comprehensive legal gap analyses between European Economic Area (EEA) law and Icelandic national legislation. It guides users through identifying transposition delays, inconsistencies, and compliance risks by systematically comparing EU directives, Joint Committee Decisions, and specific Icelandic statutes, ensuring thorough assessment of adherence to EEA obligations.

This skill simulates a senior legal counsel assessing foreign direct investment (FDI) into Indian companies. It determines if Government of India or special approval is required under FEMA 1999 and NDI Rules 2019. It systematically evaluates sectoral caps, foreign control (FOCC), and international compliance risks (LBC), providing a professional, actionable compliance advice note.

This sophisticated skill assists in-house legal teams with comprehensive legal risk assessment and classification. It uses a structured framework based on severity and likelihood, but critically, it enforces a rigorous three-step research methodology: adversarial searching for contradicting case law, systematic doctrinal web searches for context, and a temporal confidence check to ensure legal positions are current. It ensures that risk assessments are grounded in the most reliable and updated legal landscape.

Utilizes a structured Severity x Likelihood matrix to systematically assess and classify legal risks. This framework helps in-house legal teams evaluate contract exposure, assess potential deal risks, and determine appropriate mitigation actions (e.g., Accept, Mitigate, Escalate). It provides a quantifiable method for risk scoring and classification (Low, Medium, High, Critical).

This skill guides users through a comprehensive Legitimate Interest Assessment (LIA) required under GDPR Article 6(1)(f). Utilizing the official EDPB three-step test, it helps users systematically determine if processing personal data based on legitimate interest is legal, proportionate, and necessary. It is crucial for documenting compliance records, especially concerning AI training, web scraping, and direct marketing.

This skill guides the systematic migration of legacy Power Pages sites from Bootstrap 3 to Bootstrap 5. It automates the process using the `pac pages bootstrap-migrate` engine, handles necessary residual CSS/hierarchy fixes, and verifies the Bootstrap 5 runtime flag flip upon upload. It is strictly for traditional (native) content sites and does not support modern code-based frameworks like React or Vue.

A comprehensive, clause-by-clause review playbook designed for one-way commercial Non-Disclosure Agreements (NDAs). This tool helps users systematically identify key legal risks, generate preferred redlines, suggest practical fallbacks, and structure negotiation points. It provides both an executive summary and a detailed, actionable issue log, supporting both Recipient and Discloser perspectives.

This skill assists in legal workflows by systematically screening Non-Disclosure Agreements (NDAs). It evaluates structural components, confidentiality definitions, acceptable carveouts, and problematic clauses to classify the risk level (GREEN, YELLOW, RED). It guides legal teams on whether an NDA is standard, needs review, or requires full counsel intervention.

A comprehensive methodology for offensive security, detailing how to systematically extract secrets from Continuous Integration/Continuous Deployment (CI/CD) pipelines. Techniques covered include dumping environment variables, exploiting misconfigurations in HashiCorp Vault, AWS Secrets Manager, and cloud platform tokens (GitHub, GitLab, etc.). It also guides attackers on OIDC federation abuse, build log analysis, and advanced exfiltration methods, mapping to MITRE ATT&CK T1552.

A comprehensive guide detailing systematic techniques for breaking out of container isolation (Docker, Podman, containerd) into the underlying host operating system. Covers exploiting misconfigurations, abusing privileged modes, manipulating Linux capabilities (CAP_SYS_ADMIN), utilizing namespaces (nsenter), and exploiting known container runtimes CVEs. Essential for penetration testing and security red teaming engagements.

A systematic methodology for performing offensive cryptographic analysis. This skill focuses on identifying and exploiting flaws arising from the misuse of cryptographic primitives in real-world applications, rather than breaking the underlying math. Techniques covered include Padding Oracle Attacks (CBC), ECB block manipulation, Hash Length Extension, RSA weaknesses, and PRNG exploitation. Ideal for penetration testing and deep security auditing.

A comprehensive guide covering advanced Linux privilege escalation techniques. It details a systematic methodology to move from a low-privilege shell to root, exploiting misconfigurations in SUID/SGID binaries, abusing Linux capabilities, targeting sudo flaws (NOPASSWD), and leveraging kernel or system service vulnerabilities. Essential for red team and penetration testing engagements.