Skill UI

Expert DORA compliance advisor for EU financial entities and ICT providers. Covers ICT risk management, incident classification and reporting, threat-led penetration testing, third-party risk oversight, Register of Information, and contractual provisions with article-level citations. Use for gap analysis and policy drafting.

This skill conducts comprehensive governance, legal, and risk reviews for AI use cases. It assesses internal deployments, product features, and third-party vendors against best practices, privacy laws, and corporate policies. It guides users through structured intake, identifies compliance gaps, and generates formal review reports, scorecards, and remediation plans.

This skill generates the complete native source code for a third-party Platform Abstraction Module (PAM) control, including iOS Obj-C, Android Kotlin, required podspecs, and a manifest contract. It bypasses TypeScript layers, focusing purely on the native build surface and the dispatch contract (`manifest.json`). This is used by developers to scaffold the foundational, OS-specific code necessary for integrating custom, native modules into a React Native environment.

Automates the generation of the Power Apps Component Framework (PCF) companion dispatcher. This tool bridges third-party native modules (like .ppmplugin) to the Power Apps host environment by utilizing the window.PowerApps.NativeExtension.sendAsync global. It handles manifest updates, message contract generation, and structured logging, enabling seamless native-to-UI communication within the Power Apps ecosystem.

This skill serves as the recommended entry point for building and verifying third-party native plugins. It orchestrates a complete, multi-stage workflow, automatically detecting available Android and iOS targets, generating manifests, compiling binaries, assembling the bundle, and performing final audits. It ensures the output is a verified, shippable native plugin bundle.

This skill acts as a senior privacy lawyer specializing in India's Digital Personal Data Protection Act (DPDPA). It drafts or revises legally compliant consent notices and privacy policies, ensuring the content adheres to the DPDPA and is written in clear, plain English. It handles data collection scope, third-party sharing, and regulatory compliance, providing a user-friendly document for any business.

This tool serves as a pre-flight safety check for legal prompts before submission to third-party AI surfaces (e.g., ChatGPT, Claude). It assesses whether the content risks compromising attorney-client privilege or work-product protection. The output provides a structured safety band (SAFE/CAUTION/STOP), detailed triggered risk factors, a discovery impact summary, and a legally safe, redacted rewrite.

This skill automates the deployment of the dispatcher PCF for third-party components to Power Platform environments. It rigorously verifies all necessary prerequisites (Node.js, .NET SDK, `pac` CLI) and executes `pac pcf push`. It guides the user through defining the publisher prefix, managing version bumps, and ensures the component is correctly packaged and deployed to the target environment.

This skill runs a comprehensive four-layer automated validation process designed for third-party control repositories packaged as binary bundles. It performs structural pre-flight checks covering native source structure (Android/iOS), manifest consistency, and contract agreement across layers. It is designed to surface fixable issues quickly without requiring slow, full toolchain compilation, providing crucial early validation.

A comprehensive, risk-based framework for assessing third-party vendors, critical for compliance with global regulations like DORA, NIS2, and GDPR. It provides a structured, three-phase process covering financial, legal, security, and operational risks. Ideal for vendor onboarding, supply chain security audits, and ongoing vendor monitoring in regulated industries.

This skill enables structured AI red team exercises to evaluate model resilience against jailbreaks, data exfiltration, and harmful outputs. It helps identify exploitable failure modes before attackers do, suitable for new LLM features, third-party model evaluation, and compliance audits. Includes adversarial prompt libraries and automated testing scripts for security assessments.

This skill generates client SDK code, API wrapper libraries, and request/response models for any REST API. It supports multiple programming languages like Python and TypeScript, providing structured patterns for authentication, error handling, and pagination. Ideal for developers needing to integrate third-party APIs quickly with production-ready code structures.