179 skills · sorted by relevance
Review an AI agent codebase against ten OWASP ASI security risk areas. Examine tool permissions, input validation, identity checks, audit logs, and other controls, then summarize coverage, gaps, and recommended improvements in a report.
Audit Azure Blob and ADLS storage accounts for public exposure, risky access tokens, encryption settings, and insecure transport configurations. Use the azure-mgmt-storage Python SDK to produce a JSON report with account findings, severity ratings, and remediation recommendations.
Configure Zscaler Private Access to replace VPN access with access to specific internal applications. The skill covers connectors, application groups, identity and device checks, browser access, and logging for deployment and migration reviews.
Assess authorized networks through host discovery, service checks, vulnerability identification, and controlled exploitation. Follow a structured testing process to document attack paths, demonstrate business impact, clean up test artifacts, and prioritize remediation.
Set up Cloudflare Access and Tunnel to protect internal applications using user identity and device health checks. Covers application access policies, WARP device enrollment, and audit logging for teams replacing VPN access.
Run the cognee API server and optional interface on your own machine, check server health, connect SDK or HTTP clients, and configure authentication for personal development or use by multiple users.
Research a topic from multiple angles, preserve sources according to your privacy preferences, and summarize each one. Combine the evidence into a self-contained reference page, including limitations and counterarguments, with options to deepen the research later.
Check Agent Skills for documentation structure and Python script behavior, then score quality and security posture. Get grades and improvement priorities, and use pass criteria in pre-commit checks or continuous integration, which runs checks automatically.
Review cloud permissions, public storage access, network rules, and infrastructure definitions for security gaps. The skill helps identify risky configurations, rank findings by severity, and suggest narrower permissions, with fuller coverage for AWS than Azure or GCP.
Identify security threats across system components and data flows, score their risks, and prioritize mitigations. Run a quick scan for exposed credentials and route requests beyond threat modeling to the appropriate specialist skills.
Match Google Cloud data residency and access requirements to available data boundary frameworks and cloud controls. Compare ranked recommendations in a table, see requirement gaps, and receive deployment guidance with built-in frameworks prioritized.
Assess existing Google Cloud folders and projects through read-only discovery. Compare resource locations, service usage, and customer-managed encryption requirements with Assured Workloads frameworks, then report suitable options and policy readiness findings.
Audits Google Cloud Filestore instances for missing or outdated backups, overly broad file share access, and zone isolation requirements. Produces a health scorecard, prioritized findings, an instance inventory, and proposed backup remediation.
Audit and strengthen security for applications running on GKE. Configure pod traffic restrictions, sandbox isolation, namespace security standards, and Secret Manager volume mounts to protect workloads at the application and namespace level.
Map sensitive data across the systems you manage, explore what a compromised asset could expose, and maintain a risk register. Record likelihood, impact, owners, mitigations, and review dates to support ongoing security planning.
Prepare a briefing on one litigation matter using its records and event history. Summarize recent changes, deadlines, financial exposure, and open questions, with prompts to reconsider recorded risk ratings before a meeting or update.
Update one part of an existing privacy practice profile through a guided conversation. Change risk preferences, contract review positions, contacts, privacy assessment formats, or personal data request procedures, with an explanation of how the change affects later outputs.
Update individual settings in an existing product counsel profile, such as risk thresholds, escalation contacts, launch review categories, or marketing claims rules. The guided process explains downstream effects, checks inconsistencies, and saves confirmed changes without repeating setup.
Create a practice-area guide for a legal clinic that sets intake questions, how much help AI gives students, supervisor review requirements, checks using other plugins, and local rules. The guide configures how student-facing skills behave.
Prepare a draft letter demanding an end to trademark or copyright infringement, or assess a letter you received. It organizes rights, demands, counterparty risks, and response options for attorney review, following your team's enforcement policy.
Update an existing employment-law practice profile through guided questions. Adjust employee locations, risk preferences, contacts, hiring or termination review rules, and other settings while reviewing downstream effects, without repeating setup or editing configuration files by hand.
Compare AI regulations or guidance with existing company policies and practices. Determine applicability, identify missing requirements, and create a prioritized remediation plan with owners and deadlines, while highlighting legal uncertainties that need attorney judgment.
Adjust an existing commercial contracts profile through a guided conversation. Update risk preferences, approvers, contract positions, or review formats one change at a time, with an explanation of how each update affects later work.
Adjust an existing corporate legal practice profile through guided questions. Change risk preferences, contacts, review thresholds, active modules, or workspace paths, with an explanation of how each change affects related workflows.