Public Policy Bundle | Prompeteer.ai

Policy briefs, regulatory comments, legislative testimony, stakeholder mapping, and impact-assessment skills for policy analysts.

Included Skills (50)

  1. GSAP ScrollTrigger Helper — This skill assists developers using GSAP's ScrollTrigger plugin to create scroll-linked animations, parallax effects, and pinned sections in web projects.
  2. Fda Consultant Specialist — FDA regulatory consultant for medical device companies. Provides 510(k)/PMA/De Novo pathway guidance, QMSR (21 CFR 820, which incorporates ISO 13485:2016 by reference since 2026-02-02; formerly QSR) compliance, HIPAA assessments, and device cybersecurity. Use when user mentions FDA submission, 510(k), PMA, De Novo, QMSR, QSR, ISO 13485 for FDA, premarket, predicate device, substantial equivalence, HIPAA medical device, or FDA cybersecurity.
  3. Regulatory Affairs Expert — Provides regulatory guidance to HealthTech and MedTech companies, assisting with FDA submissions, CE marking, and global market access strategies.
  4. Django Web Framework — Django helps developers build robust web applications quickly and securely with its comprehensive set of built-in features.
  5. Security Incident Responder — This skill classifies, triages, and manages declared security incidents, determining severity, escalation paths, and initiating forensic evidence collection for security teams.
  6. Senior Fullstack — Fullstack development toolkit with project scaffolding for Next.js, FastAPI, MERN, and Django stacks, code quality analysis with security and complexity scoring, and stack selection guidance. Use when the user asks to "scaffold a new project", "create a Next.js app", "set up FastAPI with React", "analyze code quality", "audit my codebase", "what stack should I use", "generate project boilerplate", or mentions fullstack development, project setup, or tech stack comparison.
  7. Compliance Os — Compliance OS — meta-orchestrator that lets compliance teams CONFIGURE which frameworks apply, COMPUTE cross-framework control overlap, SIMULATE internal audits, and CONSOLIDATE evidence across multiple frameworks. Four decisions: (1) Given a company profile, which of the 12 supported frameworks apply (ISO 27001/13485/42001/14971, EU AI Act, MDR 745, GDPR, SOC 2, FDA QSR, NIST CSF 2.0, NIS2, HIPAA)? (2) Across selected frameworks, which controls overlap and how much evidence reuses? (3) For a given framework + scope, what does a realistic mock audit produce — drawing from the 205-scenario library? (4) Across selected frameworks, what's the unified evidence checklist with reuse map? Use when standing up a multi-framework program, planning the annual audit calendar, or preparing for certification stage 1. Does NOT replace per-framework skills (it orchestrates them).
  8. Quality Manager Qmr — Senior Quality Manager Responsible Person (QMR) for HealthTech and MedTech companies. Provides quality system governance, management review leadership, regulatory compliance oversight, and quality performance monitoring per ISO 13485 Clause 5.5.2. Use when leading management reviews, setting quality policy and objectives, monitoring quality KPIs and cost of quality, or exercising QMR governance and regulatory oversight responsibilities.
  9. API Security Implementer — Guides developers in implementing secure API design patterns and protecting against common API vulnerabilities.
  10. AI Pentesting Agent — This skill autonomously performs web application penetration tests using AI and security tools, assisting security engineers and DevOps teams.
  11. ISMS Audit Assistant — This skill helps security professionals conduct ISO 27001 ISMS audits, assess controls, and prepare for certification.
  12. XSS Vulnerability Scanner — Detects, exploits, and prevents Cross-Site Scripting (XSS) vulnerabilities in web applications, aiding security professionals and developers.
  13. Terraform IaC Assistant — This skill helps engineers design secure, well-structured Terraform infrastructure code by providing module design, security auditing, and CI/CD integration.
  14. Checkov Security Scanner — This skill provides expert guidance for using Checkov to scan infrastructure-as-code for security misconfigurations and compliance violations, aiding developers.
  15. Azure KeyVault Management — Provides secure storage and management of secrets, keys, and certificates in Azure Key Vault for developers.
  16. AI Security Assessor — Assess AI/ML systems for vulnerabilities like prompt injection, model inversion, and data poisoning, aiding security engineers and AI developers.
  17. Cognito Authentication Handler — This skill implements secure authentication and authorization using Amazon Cognito for developers building AWS-integrated applications.
  18. Cloud Security Assessor — Assess cloud infrastructure for security misconfigurations, IAM privilege escalation, and public exposure across AWS, Azure, and GCP environments.
  19. Nuclei Vulnerability Scanner — Scan web applications for vulnerabilities using Nuclei, a template-based scanner, assisting developers and security engineers with security assessments.
  20. Unusual Whales Data — Access Unusual Whales API for options flow, dark pool prints, sentiment, and congressional trading data, assisting traders and AI developers.
  21. Quality Manager Qms Iso13485 — ISO 13485 Quality Management System implementation and maintenance for medical device organizations. Provides QMS design, documentation control, internal auditing, CAPA management, and certification support. Use when working with medical device quality systems, preparing for ISO 13485 audits, managing regulatory compliance documentation, setting up corrective actions, or building audit preparation programs. Useful for quality management, audit preparation, regulatory compliance, medical device documentation, and corrective action workflows.
  22. Falco Security Advisor — Provides expert guidance for setting up Falco to detect anomalous container and Kubernetes behavior, aiding developers in real-time threat detection.
  23. Actions Security Auditor — This skill audits GitHub Actions workflows for security vulnerabilities in AI agent integrations, assisting developers in securing their CI/CD pipelines.
  24. API Vulnerability Finder — This skill helps security researchers and bug bounty hunters identify API vulnerabilities through comprehensive fuzzing and exploitation techniques.
  25. AWS Penetration Techniques — This skill aids red teams and security professionals in penetration testing AWS environments, uncovering vulnerabilities and potential exploits within the cloud infrastructure.
  26. Key Vault Manager — This skill manages secrets, keys, and certificates within Azure Key Vault, assisting developers with secure data storage.
  27. Security Audit Agent — This skill performs comprehensive security audits, threat modeling, and hardening for software and infrastructure projects, aiding security professionals.
  28. Active Directory Exploitation — Provides techniques for attacking Active Directory environments, aiding red teams and penetration testers in security assessments.
  29. Security Audit Agent — This skill conducts security audits, threat modeling, and provides hardening recommendations for software and infrastructure projects, aiding security professionals.
  30. Cosmos DB Builder — This skill helps developers build production-grade Azure Cosmos DB NoSQL services with clean code and security best practices.
  31. Active Directory Exploitation — Provides techniques for attacking Active Directory, assisting red teams and penetration testers in security assessments.
  32. AWS Penetration Techniques — This skill aids red teams and security professionals in penetration testing AWS environments, uncovering vulnerabilities and potential exploits within the cloud infrastructure.
  33. Stack Evaluation Tool — Evaluates and compares technology stacks, providing data-driven recommendations for engineering teams with TCO and security analysis.
  34. Deno Runtime Assistant — Helps developers build secure JavaScript/TypeScript applications using the Deno runtime with its built-in tooling and security features.
  35. Doppler Secrets Manager — Manages application secrets and environment variables using the Doppler CLI, helping developers secure their applications and streamline deployments.
  36. GCP Security Hardening — This skill helps DevOps engineers and security architects apply Google Cloud's Well-Architected Framework for security hardening and compliance evaluations.
  37. Firestore Database Manager — Facilitates real-time application development using Google Cloud Firestore, enabling data modeling, querying, and security rule configuration.
  38. Secure Tunneling Service — Expose local services securely to the internet using ngrok, enabling developers to share servers and test webhooks easily.
  39. OpenVPN Server Manager — Automates OpenVPN server and client deployment, configuration, and management, assisting network administrators and DevOps engineers with secure VPN solutions.
  40. OneNote Automation Skill — This skill enables AI agents to interact with Microsoft OneNote through the Graph API, managing notebooks, sections, and pages.
  41. PCI DSS Compliance — Achieve PCI DSS compliance by scoping, implementing controls, and selecting SAQ types for secure payment card data handling.
  42. PRD Document Writer — This skill guides product managers in writing clear, actionable Product Requirements Documents (PRDs) that align engineering, design, and stakeholders.
  43. AI Pentesting Agent — Automate security testing with PentAGI, an AI-powered penetration testing agent that helps users deploy autonomous vulnerability scanners and self-hosted security platforms.
  44. Shodan Device Discovery — This skill leverages the Shodan API to help security researchers and network administrators discover internet-connected devices and exposed services.
  45. Robotics Security Hardening — This skill hardens robotic systems by implementing security best practices for ROS2, DDS, network segmentation, and secrets management.
  46. Stack Evaluation Tool — Evaluates technology stacks, providing TCO analysis, security assessments, and intelligent recommendations for engineering teams choosing technologies.
  47. Subdomain Discovery Tool — Subfinder discovers subdomains for a target domain using passive enumeration, aiding security professionals and developers in attack surface mapping.
  48. Secrets Vault Management — This skill helps DevOps and security engineers manage secret infrastructure, including Vault, cloud secret stores, and secret rotation.
  49. Helm Charting Assistant — This skill helps developers create and improve Helm charts by scaffolding, designing values, and implementing secure templates.
  50. Tailscale Network Builder — Configure and manage Tailscale zero-trust networks, enabling secure connections between remote machines and services for developers and system administrators.