Skill UI

Assesses legal compliance and risk for temporary event staffing operations in the US and Canada. It checks critical areas including worker classification (W-2 vs 1099), joint-employer liability, wage/hour adherence, and workers' compensation requirements. Includes live state-by-state lookups for minimum wage and overtime rules.

This comprehensive skill assesses pre-launch readiness across all organizational functions, including Product, Marketing, Support, Sales, and Data. It systematically checks feature completeness, performance benchmarks, operational readiness, and communication assets. The output provides a clear Go/Conditional Go/No-Go recommendation, a prioritized blockers list with owners, a detailed risk register, and a rationale, ensuring a robust and controlled product release.

This skill systematically analyzes Non-Disclosure Agreements (NDAs) clause by clause, identifying unusual terms, one-sided provisions, and key negotiation points. It provides a plain English verdict and a structured risk assessment, helping users understand the legal implications before signing or countering a confidentiality agreement. Note: This is for informational purposes only and does not constitute legal advice.

Generates a comprehensive and actionable playbook designed for Customer Success Managers (CSMs) and Account Teams. This playbook structures all necessary elements for a renewal conversation, including detailed account health assessments, stakeholder mapping, risk registers, ROI value stories, and commercial negotiation strategies. It ensures that the team is prepared 90-180 days before the renewal date to maximize retention and identify expansion opportunities.

This skill generates a comprehensive and structured test strategy document. Given a feature specification, PRD, or system description, it systematically outlines the test scope, performs a detailed risk assessment, defines necessary test types (Unit, E2E, Performance, Security), and provides a prioritized, actionable test case outline to ensure robust quality assurance before release.

This methodology guides organizations through a comprehensive cybersecurity risk assessment using the NIST SP 800-30 framework. It systematically identifies threat sources, vulnerabilities, and potential threat events. By determining the likelihood and impact of these threats, the process calculates overall risk, resulting in a prioritized, defensible risk register. Essential for compliance (e.g., ISO 27001, HIPAA), system authorization, and strategic risk reporting.

A comprehensive guide to executing the NIST Risk Management Framework (RMF) to achieve an Authorization to Operate (ATO). This covers the full lifecycle, including preparation, system categorization (FIPS 199), control selection and tailoring (SP 800-53 Rev 5), implementation, assessment (SAR), and continuous monitoring. Essential for organizations working under FISMA or FedRAMP.

A comprehensive framework for managing third-party risk (TPRM) throughout the entire vendor lifecycle. This tool guides users through inventory, risk tiering, running due diligence questionnaires (SIG, CAIQ), reviewing security evidence (SOC 2, ISO 27001), codifying requirements in contracts, and establishing continuous monitoring protocols. It is essential for maintaining compliance, managing supply chain risk, and securing data handled by external vendors.

This skill utilizes NVIDIA's open-source garak framework to conduct comprehensive red-teaming assessments on Large Language Models (LLMs). It tests for critical vulnerabilities such as prompt injection, jailbreaks, data leakage, and toxic content generation by sending thousands of adversarial probes. Ideal for pre-deployment security validation, API guardrail testing, and generating defensible evidence for AI risk assessments.

This advanced skill performs a full-sweep analysis, providing a unified assessment of code quality across multiple dimensions: code decay, architecture integrity, technical debt, and test coverage. It automatically applies safe fixes directly to the codebase, while requiring confirmation for risky changes. It is ideal for comprehensive pre-release code health audits and automated refactoring.