Skill UI

A suite of 12 production-ready compliance agents and tools designed specifically for HealthTech and MedTech organizations. These skills cover critical international regulations and standards, including ISO 13485, EU MDR, FDA 510(k)/PMA, ISO 27001, GDPR, and risk management (ISO 14971). Use them to automate compliance tasks, manage documentation, conduct audits, and ensure adherence to global medical device standards.

Provides a vulnerability exception and risk acceptance tracker with approval workflows, compensating controls documentation, notifications, and expiration management to keep accepted risks visible for compliance teams.

Guide to using the Metasploit Framework to validate and exploit verified vulnerabilities, document impact, scan auxiliary vectors, and confirm patches within a risk-based vulnerability management cycle.

Helps continuously discover, classify, and risk-score every API while enforcing policies and aggregating findings from gateways, CI/CD, and runtime tooling to maintain an organization’s API security posture.

Implements multi-cloud CSPM by wiring AWS Security Hub, Azure Defender for Cloud, and tools like Prowler and ScoutSuite to detect misconfigurations and posture risks.

Guides teams through planning, implementing, auditing, and certifying an ISO/IEC 27001:2022 information security management system, covering scope definition, risk assessment, Annex A control selection, Statement of Applicability, and continuous improvement practices.

Provides a structured approach for implementing NERC CIP compliance controls across BES cyber systems, covering categorization, electronic security perimeters, security and configuration management, supply chain risk, and the 2025 MFA plus low-impact asset updates.

Structured patch governance for OT/ICS environments, covering vendor testing, risk-based prioritization, staged deployment, rollback planning, compensating controls, and scheduling during constrained maintenance windows.

This skill covers the comprehensive automation of X.509 certificate lifecycle management, including requesting, issuing, deploying, monitoring, renewing, and revoking certificates. Utilizing Python and the ACME protocol (like Let's Encrypt), it helps organizations mitigate security risks and prevent service outages caused by expired or poorly managed certificates. Ideal for security auditing, incident response, and continuous security testing.

Performs sector-specific threat landscape assessments by analyzing targeting patterns, attack vectors, TTPs, and vulnerability trends so security teams can prioritize risk management, investment, and reporting for verticals such as finance, healthcare, energy, and government.

This advanced prompt simulates a Senior Project Manager and DevOps specialist. It takes comprehensive feature artifacts (PRD, technical breakdowns, testing plans) and generates a structured, automated GitHub project plan. It enforces Agile best practices (Epic > Feature > Story > Enabler > Task) and includes templates for issue creation, dependency management, risk assessment, and Definition of Done, ensuring robust project tracking within GitHub.

This guide outlines critical security best practices for design-to-code pipelines using Anima and Figma. It covers securing API credentials by restricting token scopes (e.g., read-only access for Figma), enforcing server-side execution for SDKs, and implementing robust secret management using cloud services like GCP Secret Manager. This minimizes the risk of credential leakage in CI/CD environments.