Skill UI

Assists in-house legal teams with privacy regulation compliance. Covers GDPR, CCPA/CPRA, and other major laws; provides DPA review checklists, data subject request timelines, cross-border transfer guidance, and regulatory monitoring. Helps handle compliance tasks without giving legal advice.

Researches US employment law across federal, state, and city levels. Produces structured research notes that separate primary law sources from secondary reporting. Covers enacted laws, pending legislation, litigation, and multi-state trackers. Supports scoping by jurisdiction and recency, ideal as a precursor to memos or dashboards.

Tracks and analyzes EU regulations and Polish implementing acts and draft laws (PPWR, CBAM, EUDR, ESPR, CSRD, CSDDD, GPSR, AI Act, batteries, ecodesign). Reports legal status, application dates, transitional provisions, relationships, compliance obligations, and official sources.

This skill conducts comprehensive governance, legal, and risk reviews for AI use cases. It assesses internal deployments, product features, and third-party vendors against best practices, privacy laws, and corporate policies. It guides users through structured intake, identifies compliance gaps, and generates formal review reports, scorecards, and remediation plans.

This skill guides the preparation of a summary legal summons (assignation en référé) before a commercial court. It is specifically designed for recovering certain, liquid, and due commercial debts (such as unpaid invoices or service fees) when the debtor has failed to meet their payment obligations and there is no serious legal contestation. The process covers comprehensive information gathering, structured legal document drafting, adapting to specific case types, and checking strategic legal points.

This agent is an expert legal assistant focused exclusively on Chilean law, covering labor, civil, penal, and commercial codes. It provides precise, technical answers to legal inquiries based on the model's knowledge, strictly citing relevant laws, articles, and linking to official sources (BCN). Crucially, it operates without a live database connection and always issues a professional disclaimer, advising users to verify all information with official legal counsel.

This skill performs a comprehensive legal compliance audit for e-commerce websites operating in Morocco. It focuses specifically on adherence to Moroccan data protection laws (Law 09-08) and consumer contract obligations and mandatory disclosures (Law 31-08). Use this when assessing the validity of Terms & Conditions, privacy policies, right of withdrawal, and other required consumer disclosures.

This skill provides a specialized analysis of NIL (Name, Image, and Likeness) contracts for NCAA student-athletes. Operating from the athlete's perspective, it identifies critical red flags, missing protections, and compliance issues based on applicable state laws. It generates a structured review memorandum, complete with negotiation positions, serving as a powerful preliminary tool for licensed attorneys. **Disclaimer: This is not legal advice.**

A comprehensive methodology for offensive security, detailing how to systematically extract secrets from Continuous Integration/Continuous Deployment (CI/CD) pipelines. Techniques covered include dumping environment variables, exploiting misconfigurations in HashiCorp Vault, AWS Secrets Manager, and cloud platform tokens (GitHub, GitLab, etc.). It also guides attackers on OIDC federation abuse, build log analysis, and advanced exfiltration methods, mapping to MITRE ATT&CK T1552.

A systematic methodology for performing offensive cryptographic analysis. This skill focuses on identifying and exploiting flaws arising from the misuse of cryptographic primitives in real-world applications, rather than breaking the underlying math. Techniques covered include Padding Oracle Attacks (CBC), ECB block manipulation, Hash Length Extension, RSA weaknesses, and PRNG exploitation. Ideal for penetration testing and deep security auditing.

A comprehensive guide covering the full attack lifecycle in Kubernetes. Techniques include service account token theft, RBAC misconfiguration exploitation, kubelet API abuse, pod escape, and cloud metadata compromise across major cloud platforms (AWS, GCP, Azure). Essential for security assessment and penetration testing of cloud-native environments.

A comprehensive guide covering advanced Linux privilege escalation techniques. It details a systematic methodology to move from a low-privilege shell to root, exploiting misconfigurations in SUID/SGID binaries, abusing Linux capabilities, targeting sudo flaws (NOPASSWD), and leveraging kernel or system service vulnerabilities. Essential for red team and penetration testing engagements.