Skill UI

Expert advisor on EU Cyber Resilience Act (Regulation 2024/2847) for products with digital elements. Use for gap analysis, product classification, conformity assessment route selection, CE marking, SBOM requirements, ENISA vulnerability reporting, support periods, and manufacturer/importer/distributor compliance duties.

This skill acts as a senior privacy lawyer specializing in India's Digital Personal Data Protection Act (DPDPA). It drafts or revises legally compliant consent notices and privacy policies, ensuring the content adheres to the DPDPA and is written in clear, plain English. It handles data collection scope, third-party sharing, and regulatory compliance, providing a user-friendly document for any business.

This specialized skill generates expert prompts for structured legal analysis of major EU digital regulations (e.g., GDPR, AI Act, DSA). It analyzes the document's character, elicits the desired outcome and audience, and produces a tailored prompt, always including a plain-English summary. Ideal for preparing professional memos, stakeholder consultation responses, and strategic policy briefings.

This skill helps legal professionals set up a personalized, structured Legal Guidance Vault. It guides the user through an interview of their entire digital tool stack (email, calendar, docs, etc.) to ensure all sources are covered. It generates a standardized, reusable prompt template for archiving privileged legal advice, making it searchable by topic, person, or product in future sessions.

This skill guides users through a comprehensive Legitimate Interest Assessment (LIA) required under GDPR Article 6(1)(f). Utilizing the official EDPB three-step test, it helps users systematically determine if processing personal data based on legitimate interest is legal, proportionate, and necessary. It is crucial for documenting compliance records, especially concerning AI training, web scraping, and direct marketing.

This tool extracts structured MIDI data and potential sheet music scores from an existing, generated music production. It is essential for users who need to transcribe, arrange, or import the music into a Digital Audio Workstation (DAW). Processing requires a valid production ID.

An expert advisory tool for navigating the EU NIS2 Directive (Directive (EU) 2022/2555) compliance requirements. It provides deep analysis on entity classification (Essential vs. Important), governance obligations (Art. 20), risk management gap assessments (Art. 21), and incident reporting timelines (Art. 23). Use it for organizational readiness, policy drafting, and alignment with standards like ISO 27001 and DORA across critical and essential digital infrastructure sectors.

A comprehensive guide for red team operators detailing techniques to manipulate, clear, or destroy digital evidence on Windows and Linux systems. Covers clearing Windows Event Logs (wevtutil), manipulating Linux system logs, timestamp forgery, file system scrubbing, and memory artifact removal. Essential for understanding advanced evasion methods and achieving operational security during authorized engagements.

A comprehensive guide to advanced Command and Control (C2) frameworks used in professional red teaming. This skill covers deployment, configuration, and operational tradecraft for tools like Cobalt Strike, Sliver, and Mythic. Topics include creating malleable profiles to mimic legitimate traffic, utilizing DNS/SMB beacons for stealth, implementing BOF for in-memory execution, and building resilient infrastructure via domain fronting and redirectors.

A comprehensive methodology for exploiting modern Continuous Integration/Continuous Delivery (CI/CD) pipelines. This skill covers advanced attack vectors across major platforms, including GitHub Actions expression injection, Jenkins RCE, GitLab YAML abuse, and Azure DevOps compromise. Techniques focus on privilege escalation, credential theft, and supply chain poisoning, mapping to MITRE ATT&CK T1195.002.

A comprehensive methodology for offensive security, detailing how to systematically extract secrets from Continuous Integration/Continuous Deployment (CI/CD) pipelines. Techniques covered include dumping environment variables, exploiting misconfigurations in HashiCorp Vault, AWS Secrets Manager, and cloud platform tokens (GitHub, GitLab, etc.). It also guides attackers on OIDC federation abuse, build log analysis, and advanced exfiltration methods, mapping to MITRE ATT&CK T1552.

This skill converts structured Seed specifications (YAML or JSON) into a comprehensive set of GitHub Issues. It is designed for team-based product management, automatically creating an Epic containing goals, constraints, and acceptance criteria, and breaking down acceptance criteria into manageable Task issues for development teams.