Security Assurance Bundle

Skills that help ensure systems and assets meet security and compliance standards.

Browse all skill bundles

Included Skills (54)

  1. Hsb Flash — Flash the FPGA on an HSB board connected to an NVIDIA devkit. Supports HSB Lattice boards (FPGA versions 2407, 2412, 2507, 2510) and Leopard Imaging VB1940 "all-in-one" cameras (FPGA versions 2507, 2510). Uses release-specific YAML manifests and board-type-specific program commands. Lattice and VB1940 commands must never be mixed.
  2. Quality Manager Qmr — Senior Quality Manager Responsible Person (QMR) for HealthTech and MedTech companies. Provides quality system governance, management review leadership, regulatory compliance oversight, and quality performance monitoring per ISO 13485 Clause 5.5.2. Use when leading management reviews, setting quality policy and objectives, monitoring quality KPIs and cost of quality, or exercising QMR governance and regulatory oversight responsibilities.
  3. Kubernetes Compliance Auditor — This tool analyzes kube-bench output to generate comprehensive CIS benchmark audits, providing remediation guidance and compliance evidence for security professionals and auditors.
  4. OT Incident Playbook — This tool develops specialized OT incident response playbooks for cybersecurity professionals to ensure safety-critical alignment with IEC 62443 and NIST standards.
  5. GCP Policy Enforcer — This tool automates GCP organization policy implementation via Terraform and gcloud to help security engineers enforce compliance and harden cloud resource configurations.
  6. Hardening Windows Endpoint With Cis Benchmark — Hardens Windows endpoints using CIS (Center for Internet Security) Benchmark
  7. Oil Gas Cybersecurity Assessment — This skill conducts comprehensive cybersecurity assessments for oil and gas OT infrastructure, ensuring compliance with industry standards like API 1164 and IEC 62443.
  8. Brand Asset Registry — Helps businesses manage their logos and images by tracking usage rights, formats, and brand guidelines.
  9. Performing Ics Asset Discovery With Claroty — Performs ICS/OT asset discovery with Claroty xDome, combining passive
  10. Ransomware Recovery Validator — This tool validates ransomware recovery procedures and backup integrity to help security teams ensure organizational resilience and meet critical RTO and RPO targets.
  11. Purdue Model Architect — This tool assists ICS security engineers in designing hierarchical network segmentation and IT/OT DMZs aligned with the Purdue Model and IEC 62443 standards.
  12. Windows Hardening — Harden Windows servers per security baselines and CIS benchmarks. Configure
  13. SailPoint Access Auditor — Automates entitlement reviews and access certification campaigns in SailPoint IdentityIQ to help security teams maintain compliance and remediate segregation-of-duties violations.
  14. Implementing Vulnerability Sla Breach Alerting — Build an automated SLA breach alerting system for vulnerability remediation,
  15. Auditing Kubernetes Cluster Rbac — Auditing Kubernetes cluster RBAC configurations to identify overly permissive
  16. OT Remote Access — Implements secure IEC 62443-compliant conduit architecture to protect industrial control systems by managing vendor and engineer remote access through jump servers.
  17. Triaging Vulnerabilities With Ssvc Framework — Triages and prioritizes vulnerabilities with CISA's Stakeholder-Specific
  18. Patch Tuesday Orchestrator — This skill helps security teams establish a repeatable, risk-based workflow for triaging, testing, and deploying Microsoft security updates within strict remediation SLAs.
  19. Quality Documentation Manager — Document control system management for medical device QMS. Covers document numbering, version control, change management, and 21 CFR Part 11 compliance. Use when working on document control procedures, change control workflows, document numbering, version management, electronic signature compliance, or regulatory documentation review.
  20. Qms Audit Expert — ISO 13485 internal audit expertise for medical device QMS. Covers audit planning, execution, nonconformity classification, and CAPA verification. Use when planning internal audits, executing audits, classifying findings, preparing for external audits, or managing an audit program.
  21. GDPR Compliance Advisor — This skill provides actionable engineering guidance for developers and architects to implement privacy-by-design principles and ensure regulatory compliance across all software systems.
  22. Marketplace Authorization Auditor — This tool helps security engineers verify complex multi-role access controls and resource ownership boundaries within marketplace platforms to ensure robust authorization enforcement.
  23. Spec To Code Compliance — Verifies code implements exactly what documentation specifies for blockchain audits. Use when comparing code against whitepapers, finding gaps between specs and implementation, or performing compliance checks for protocol implementations.
  24. Cis Benchmarks — Audit and remediate CIS benchmark violations.
  25. Windows Privilege Escalation — Provide systematic methodologies for discovering and exploiting privilege escalation vulnerabilities on Windows systems during penetration testing engagements.
  26. Hugging Face Memory Estimator — This tool estimates VRAM and memory requirements for Hugging Face models without downloading weights, helping developers determine hardware compatibility for model inference.
  27. Agent Run Auditor — This tool independently verifies agent execution success by auditing available traces, logs, and artifacts to ensure claims align with objective evidence.
  28. Hf Mem — Hugging Face CLI to estimate the required memory to load Safetensors or GGUF model weights for inference from the Hugging Face Hub
  29. Case Review — Quality-gate review of a reverse-engineering or assessment case package: scope readiness, Evidence-to-Finding-to-Path traceability, work-item coverage, timeline consistency, and artifact hashes.
  30. Stellar Asset Clawback Compliance — Regulated Stellar asset clawback architecture register: issuer authorization flags, claimable balance revocations, and regulatory audit trail.
  31. Spreadsheet Logic Engine — This tool enables AI agents to execute formula-backed spreadsheet operations programmatically, providing reliable business logic processing without requiring manual UI interaction.
  32. Docker Security Auditor — This tool audits Docker environments against CIS benchmarks to identify security misconfigurations and provides actionable remediation steps for container infrastructure hardening.
  33. Supply Chain Security — Comprehensive software supply-chain security assessment for developers and security teams.
  34. Agent Decision Receipts — Mint a tamper-evident, post-quantum-signed receipt for a consequential agent action (deploy, delete, pay, grant-access, model decision) so it can be verified later from the certificate alone. Use when an autonomous agent takes a side-effecting action that may need to be proven later, or when satisfying EU AI Act Article 12 record-keeping. Three decisions: whether an action needs a receipt, minting it, verifying it. Signing is delegated to the open-source OpenAgentOntology package. Not after-the-fact log analysis; not a hosted notary; not a legal opinion.
  35. Event Staffing Compliance — Assess worker-classification and compliance risk for temporary event staffing in the US and Canada — W-2 vs 1099, misclassification penalties, joint-employer liability, COI, and wage/hour rules. Includes live state-by-state lookups via MCP.
  36. Ra Qm Skills — The skill acts as a routing hub for fifteen regulatory and quality‑management capabilities, directing compliance requests to the appropriate specialized skill. It enables organizations to prepare for audits, assess AI risk, and ensure adherence to standards such as ISO 13485, EU MDR, FDA submissions, ISO 14971, CAPA, GDPR, SOC 2, and more. Compliance officers, quality managers, and regulatory teams benefit from precise, streamlined guidance that simplifies complex regulatory workflows.
  37. Fda Food Safety Auditor — Expert AI auditor for FDA Food Safety (FSMA), HACCP, and PCQI compliance. Reviews food facility records and preventive controls.
  38. Mobile Ads Validator — This tool audits Google Mobile Ads SDK integrations across mobile platforms to ensure correct configuration, compliance, and optimal performance for app developers.
  39. Web Design Guidelines — Review files for compliance with Web Interface Guidelines.
  40. Performing Hash Cracking With Hashcat — Cracks password hashes with Hashcat, covering hash-type identification,
  41. AWS Privilege Escalation Detector — This tool identifies dangerous IAM privilege escalation paths and least-privilege violations in AWS environments to help security analysts strengthen cloud infrastructure security.
  42. Fix Review — Verifies fix commits address audit findings without introducing new bugs or vulnerabilities.
  43. Agent Security Auditor — This tool performs comprehensive security audits on third-party agent skills and extensions to identify potential risks before installation for developers and users.
  44. OAuth Consent Auditor — This tool identifies illicit OAuth application consent grants in Microsoft Entra ID to help security analysts detect and mitigate potential cloud-based account compromise.
  45. Security Audit Validator — It validates evidence and prevents suppression of security findings in audit reports.
  46. Cost Analysis — The skill analyzes actual Azure spend, detecting bill changes and pinpointing high‑cost resources such as AKS clusters, Cosmos DB, and Foundry models. It highlights cost spikes, unexpected charges, and idle capacity, enabling IT finance teams to understand bill increases and isolate the most expensive components. The tool does not provide forecasting, pricing estimates, rightsizing, commitments, or budgeting.
  47. PCI Compliance Assistant — This tool helps engineering teams map payment data flows and organize technical evidence to streamline preparation for formal PCI DSS compliance assessments.
  48. Video Production Manager — This skill assists production managers in coordinating complex video projects by streamlining vendor management, logistics, compliance, and scheduling for professional shoots.
  49. Email Sequence Validator — This tool helps marketing and operations teams ensure email sequences meet rigorous standards for content, data accuracy, compliance, and monitoring before launch.
  50. Marketing Asset Approver — This tool streamlines co-marketing asset reviews by managing stakeholder feedback, enforcing compliance SLAs, and maintaining secure, traceable audit logs for project teams.
  51. Technical Whitepaper Generator — This skill assists technical writers and marketers in creating structured, research-heavy whitepapers and supporting assets for specialized industries requiring high compliance and data accuracy.
  52. Technical Bid Manager — This tool streamlines manufacturing proposal development by organizing reusable compliance documentation, architecture modules, and bid templates for engineering and sales teams.
  53. Co-Branding Compliance Manager — This tool helps marketing teams and partners maintain consistent visual, messaging, and legal standards across all shared collaborative campaign assets.
  54. Journey Governance Framework — This tool helps cross-functional teams establish ownership, operational cadences, and compliance standards to effectively manage and optimize complex customer journey programs.

Opening your workspace…