AnasSahel/agent-labs

attack-chain

Chain risks from the register into one compound attack, where what the attacker holds at the end of one risk is the way in to the next (a phishing email, then an old server, then payroll), score the chain by its hardest step and its final impact, name the one…

لغة النص الأصلي: الإنجليزية

audit-evidence

Collect audit evidence into `grc/evidence/`, file each piece against the ISO 27001 controls it proves, show which controls in scope are evidenced, stale or missing for ISO 27001, NIS2, DORA or GDPR from fixed mapping files, catch controls the register calls…

لغة النص الأصلي: الإنجليزية

committee-report

Turn the risk register into a report for a security, risk or audit committee or a board: posture in one sentence, portfolio heat map with what moved since the last report, risks above appetite, treatment progress and the decisions to take, after a short…

لغة النص الأصلي: الإنجليزية

framework-mapper

Answer any question about what a security or privacy framework requires, from fixed mapping files and never from memory, even when you think you know the answer, since only the files are traceable. Use for any question that names or needs an article, clause…

لغة النص الأصلي: الإنجليزية

gap-analysis

Check the organisation against ISO 27001 and any framework mapped to it (NIS2, DORA, GDPR, SOC 2, PCI DSS, NIST CSF, AI Act and more), requirement by requirement from the fixed framework files, mark each one met, partial, missing, not applicable or unknown…

لغة النص الأصلي: الإنجليزية

grc-grill

Grill the user on a governance, risk or compliance decision one question at a time, each with a recommended answer cited to a framework clause, within a question budget, then ask which output format they want. Use when a GRC skill needs decisions from the…

لغة النص الأصلي: الإنجليزية

grc-router

Route a governance, risk or compliance request to the GRC skill that owns it, chain them when the request spans several, and say where the user stands and what to do next, without grilling. Use when the user asks for GRC, cybersecurity governance, risk or…

لغة النص الأصلي: الإنجليزية

policy-writer

Write or review a security policy (access control, acceptable use, incident response, supplier security, backup, any topic) in plain words, each rule traced to a framework clause or a register risk, after a hard grill on scope, owner, approver and the rules…

لغة النص الأصلي: الإنجليزية

raci-builder

Build a RACI matrix for a security process or the whole security programme (who is Responsible, Accountable, Consulted, Informed), with each activity tied to an ISO 27001, NIS2, DORA or GDPR duty, then check it for missing or double accountability, conflicts…

لغة النص الأصلي: الإنجليزية

risk-assessment

Assess a security risk as an EBIOS RM scenario, draw its risk path, score it by severity and likelihood before and after treatment (ISO 27005), propose controls mapped to ISO 27001 and to the frameworks in scope from fixed mapping files (NIS2, DORA, GDPR),…

لغة النص الأصلي: الإنجليزية

risk-register

Keep the risk register, `grc/risk-register.md`, as the one source of truth for every risk: list, filter and review it, update a row's status, owner, due date or control progress, import risks from a spreadsheet or Jira, and export it with a portfolio heat…

لغة النص الأصلي: الإنجليزية

vendor-risk

Assess a supplier, SaaS or service provider before signing or at renewal: tier it by how much the business depends on it, check its security evidence (certificates, questionnaire, contract, DPA) against what its tier requires, score it as one risk, and give a…

لغة النص الأصلي: الإنجليزية

sail-fill-campaign

Fill the fields of a SailPoint Identity Security Cloud certification campaign (manager, source owner, search, role composition) from what the user wants to certify and the naming and filling rules of the project or tenant, show every field with where its…

لغة النص الأصلي: الإنجليزية

factory-build

Build phase. Turn an approved spec into code in two halves: first a plan (plan.md, the files that change, the order, the risks and the tests that prove each criterion), drafted in plan mode without touching the code and accepted by the user (and the tech lead…

لغة النص الأصلي: الإنجليزية

factory-design

Design phase. Turn an intent or an issue into a spec, what to build and how, in one unattended session, reviewed while it's written by specialized agents (security by OWASP, risk by EBIOS RM and ISO 27005, privacy by GDPR, and each of the project's own…

لغة النص الأصلي: الإنجليزية

factory-plan

Plan phase. Turn a bug, idea or request into an intent — the problem in the originator's words, brainstormed until concrete — proposed to the repo as intent/<id>-<slug>.md in a pull request, whose merge is the user's go, and tracked by an issue in any tracker…

لغة النص الأصلي: الإنجليزية

grill-me-live

Grill an idea relentlessly while its decision tree grows live in the browser, where you can also answer.

لغة النص الأصلي: الإنجليزية

factory-brainstorm

Brainstorm an idea, plan or decision with the user until it's concrete enough to write down, in short rounds of questions with recommended answers, then a builder check that ends it, and keeps a trace of every question and answer. Works inside the current…

لغة النص الأصلي: الإنجليزية

write-skill

Draft a new skill, or rewrite an existing one, short and built on leading words.

لغة النص الأصلي: الإنجليزية