Security

Practitioner skill for advising on EU Regulation 2023/2854 (Data Act).

Assess whether Government of India approval is required for foreign investment in an Indian company under Foreign Exchange Management Act, 1999 and the…

Builds a high-fidelity interactive legal assessment as a single self-contained HTML artifact.

Generates standalone interactive HTML "deal cards" that translate complex regulations into negotiation-ready reference tools, systematically distinguishing…

Postgres best practices maintained by Supabase, for Postgres running anywhere.

Use when security verification is needed - pre-commit security checks, vulnerability scanning, STRIDE threat analysis.

Harness-neutral community incident reporting for AI agents.

Apply focused code-quality checks when implementing or reviewing behavioral changes.

Scans a codebase for security vulnerabilities using CodeQL's interprocedural data flow and taint tracking analysis.

Audits code for unit and decimal-scaling bugs and annotates it with dimensional comments recording the units of each value.

Analyzes smart contract codebases to identify state-changing entry points for security auditing.

Scans Android APKs for Firebase security misconfigurations including open databases, storage buckets, authentication issues, and exposed cloud functions.

Translates Mermaid sequenceDiagrams describing cryptographic protocols into ProVerif formal verification models (.pv files).

Runs a Semgrep security scan over a codebase: detects languages, selects rulesets, presents the plan for explicit approval, then runs every approved ruleset…

Builds and queries multi-language source and binary code graphs for security analysis.

Guides authoring of high-quality YARA-X detection rules for malware identification.

Drafts, reviews, rewrites, and coaches outcome-based OKR sets across team, department, product, or company scopes.

Run a repo-wide cross-cutting governance audit via the pm-skill-auditor sub-agent.

This skill builds a structured audit trail of an AI-assisted task: what the tool was asked to do, what materials it was given, what it produced, how the…

Orientação completa sobre conformidade com regulamentações do Banco Central do Brasil: Resolução CMN nº 4.893/2021 (Política de Segurança Cibernética)…

Analyze any OFAC or OFSI enforcement action — by URL, pasted text, or uploaded document — and produce a structured root cause analysis as a formatted Excel…

Post-hoc verification and trust audit of AI-generated factual and interpretive claims.

Adversarial verification of AI-generated legal content with systematic fact-checking, source validation, and quality control.

Risk-based vendor assessment framework for IT service providers, technology vendors, and third-party partners under DORA, NIS2, GDPR.