Menu
Skills in this repository
SkillsMP has collected 257 skills from cyberskill-official/cyberos. Open a skill to review its source and details.
cyberskill-official/cyberosShowing 40 of 257 collected skills.
Author a sprint or project retrospective (retro@1) per modules/cuo/docs/appendices.md (§13 Software Development Process) Template §4.8 (Start/Stop/Continue + DORA Review). Captures team mood, DORA metric trends for the iteration, 3 keep-doings / 3…
Audit one or more existing rhythm-of-business@1 markdowns against rhythm-of-business_rubric@1.0. Produces a sibling .audit.md per artefact plus an AUDIT_BATCH_SUMMARY. Halts on needs_human verdicts; resumable on audited_file_sha256. Standalone trigger or…
Author the annual + quarterly rhythm-of-business calendar (annual cadence map + quarterly drumbeat + weekly rhythm + per-function review + blackout windows). Chief of Staff authored. Use when user asks to "draft a rhythm of business" or "create the rhythm of…
Author a production operational runbook (runbook@1) for a specific failure mode or recurring task from incident history + observability dashboards + on-call notes. Use when user asks to "draft a runbook for high memory ingest lag", "create the on-call runbook…
Audit one or more existing safety-report@1 markdowns against safety-report_rubric@1.0. Produces a sibling .audit.md per artefact plus an AUDIT_BATCH_SUMMARY. Halts on needs_human verdicts; resumable on audited_file_sha256. Standalone trigger or chains…
Author the quarterly clinical-safety report (executive summary + AE aggregation + signal detection + SAE inventory + risk-benefit assessment + regulatory submissions). ICH E2D PSUR + FDA MedWatch + EMA EudraVigilance compliant. Chief Medical Officer authored.…
Audits a security-strategy@1 artefact against security_strategy_rubric@1.0. Validates FM + SEC, threat-landscape sourcing (Verizon DBIR / industry intel), NIST CSF 2.0 posture-gap mapping, initiative-prioritization rationale, budget-envelope feasibility. Per…
Authors the annual information-security strategy. Threat landscape, current posture vs NIST CSF 2.0, CIS Controls IG1/IG2/IG3 maturity, prioritized initiatives, budget envelope, security OKRs, board narrative. Per NIST CSF 2.0 + ISO/IEC 27001:2022 + CIS…
Audits a soc2-evidence@1 artefact against soc2_evidence_rubric@1.0. Validates FM + SEC, TSC coverage completeness, per-control evidence freshness vs audit window, gap-analysis honesty, auditor-readiness statement realism. Per AICPA TSC + ISAE 3000/3402…
Assembles the SOC 2 Type I or Type II evidence package. Control inventory mapped to AICPA Trust Services Criteria, per-control evidence with collection date + period, auditor-facing index, gap analysis, remediation plan. Per AICPA TSC 2017 (with 2022…
Audit one or more existing software-design-document@1 markdowns against sdd_rubric@1.0. Produces a sibling .audit.md per artefact plus an AUDIT_BATCH_SUMMARY. Halts on needs_human verdicts; resumable on audited_file_sha256. Standalone trigger or chains…
Author a Software Design Description (sdd@1) per IEEE 1016-2009 from approved SRS plus accepted ADRs. Captures component design, interface specifications (OpenAPI), data schema, UI/UX prototype references, and design rationale per IEEE 1016 design viewpoints.…
Audit one or more existing software-requirements-specification@1 markdowns against srs_rubric@1.0. Produces a sibling .audit.md per artefact plus an AUDIT_BATCH_SUMMARY. Halts on needs_human verdicts; resumable on audited_file_sha256. Standalone trigger or…
Author a Software Requirements Specification (srs@1) per IEEE 830-1998 from an approved PRD, SOW, or discovery brief. Enumerates business, functional, and non-functional requirements; the NFR block enforces ISO/IEC 25010:2023's nine quality characteristics…
Audit one or more existing stage-gate@1 markdowns against stage-gate_rubric@1.0. Produces a sibling .audit.md per artefact plus an AUDIT_BATCH_SUMMARY. Halts on needs_human verdicts; resumable on audited_file_sha256. Standalone trigger or chains naturally…
Author a one-page stage-gate sign-off (stage-gate@1) per modules/cuo/docs/appendices.md (§13 Software Development Process) Template §4.3. Captures: stage name, entry criteria met (Y/N + evidence link), exit criteria met (Y/N + evidence link), risks/issues,…
Audit one or more existing statement-of-work@1 markdowns against sow_rubric@1.0. Produces a sibling .audit.md per artefact plus an AUDIT_BATCH_SUMMARY. Halts on needs_human verdicts; resumable on audited_file_sha256. Standalone trigger or chains naturally…
Author a Statement of Work (SOW) / Project Charter from a discovery brief, lead form, or kick-off interview. Covers all 12 SOW skeleton fields (objectives, scope in/out, deliverables, assumptions and constraints, engagement model, team and roles, schedule and…
Audit one or more existing strategy-document@1 markdowns against strategy-doc_rubric@1.0. Produces a sibling .audit.md per artefact plus an AUDIT_BATCH_SUMMARY. Halts on needs_human verdicts; resumable on audited_file_sha256. Standalone trigger or chains…
Author the annual 3-5yr strategy document (vision + strategic diagnosis-the-kernel + guiding policy + coherent actions + OKR cascade tie-in + capability investments + financial framework + strategic risks + measurement plan). Rumelt Good-Strategy kernel +…
Audit one or more existing sustainability-report@1 markdowns against sustainability-report_rubric@1.0. Produces a sibling .audit.md per artefact plus an AUDIT_BATCH_SUMMARY. Halts on needs_human verdicts; resumable on audited_file_sha256. Standalone trigger…
Author the annual sustainability report (executive summary + governance + strategy + risk-opportunity + Scope 1/2/3 metrics + targets + progress + assurance statement). CSRD/ESRS or ISSB IFRS S1/S2 framework. CSO-Sustainability or Chief ESG Officer authored.…
Generate a versioned <artefact>@1 markdown from one or more <input artefact(s)>. Use when user asks to "draft a <ARTIFACT>" or "turn this <input> into a <ARTIFACT>". Halts at PLAN approval and HITL gates; resumable from manifest.json state. Chains naturally…
Author a test strategy document (test-strategy@1) per ISO/IEC/IEEE 29119-3 from an approved SRS or impl-plan. Use when user asks to "draft a test strategy", "outline the test plan for the auth slice", or "design the testing approach". Captures test types…
Audit one or more existing thirteen-week-cash-flow@1 markdowns against 13-week-cash-flow_rubric@1.0. Produces a sibling .audit.md per artefact plus an AUDIT_BATCH_SUMMARY. Halts on needs_human verdicts; resumable on audited_file_sha256. Standalone trigger or…
Author the weekly 13-week cash-flow forecast during distress (opening cash + receipts by week + disbursements by week + ending cash + covenant compliance + variance + stretch-vendor actions). Industry-standard TWCF model. CRO-Restructuring (or CFO during…
Audit one or more existing threat-model@1 markdowns against threat-model_rubric@1.0. Produces a sibling .audit.md per artefact plus an AUDIT_BATCH_SUMMARY. Halts on needs_human verdicts; resumable on audited_file_sha256. Standalone trigger or chains naturally…
Author a STRIDE-based threat model (threat-model@1) from an SRS plus accepted ADRs. Enumerates trust boundaries, data flows, threats per STRIDE category (Spoofing, Tampering, Repudiation, Information Disclosure, Denial of Service, Elevation of Privilege),…
Reference TypeScript skill — say hello with a structured greeting. Use as a starting template for new CyberOS skills. Do NOT use in production — this is a hello-world scaffold demonstrating the SKILL.md + WASM component pattern. Use when user asks to…
Audit one or more existing transformation-roadmap@1 markdowns against transformation-roadmap_rubric@1.0. Produces a sibling .audit.md per artefact plus an AUDIT_BATCH_SUMMARY. Halts on needs_human verdicts; resumable on audited_file_sha256. Standalone trigger…
Author a multi-year transformation roadmap (current state + future state + wave plan + change-mgmt approach + governance + quick wins + metrics dashboard). McKinsey 7S + Kotter 8-step aligned. Chief Transformation Officer or Chief Digital Officer authored.…
Audit one or more existing transparency-report@1 markdowns against transparency-report_rubric@1.0. Produces a sibling .audit.md per artefact plus an AUDIT_BATCH_SUMMARY. Halts on needs_human verdicts; resumable on audited_file_sha256. Standalone trigger or…
Author the quarterly transparency report (data requests received + AI-system disclosures + content-moderation actions + government info-requests + methodology + contact). Google + Microsoft + Meta transparency-report exemplars. Chief Trust Officer authored.…
Audit one or more existing trust-portal-update@1 markdowns against trust-portal-update_rubric@1.0. Produces a sibling .audit.md per artefact plus an AUDIT_BATCH_SUMMARY. Halts on needs_human verdicts; resumable on audited_file_sha256. Standalone trigger or…
Author the monthly trust-portal content update (certifications + audit results + sub-processor list + incident-status timeline + FAQ updates + customer-trust briefing log). Vanta / Drata / SafeBase trust-portal patterns. Chief Trust Officer + CPO-Privacy…
Audit one or more existing turnaround-plan@1 markdowns against turnaround-plan_rubric@1.0. Produces a sibling .audit.md per artefact plus an AUDIT_BATCH_SUMMARY. Halts on needs_human verdicts; resumable on audited_file_sha256. Standalone trigger or chains…
Author the post-distress turnaround plan (diagnostic + cash conservation + cost-out + non-core divestiture + creditor renegotiation + new-financing path + KERP/KEIP + milestone sign-off). AlixPartners / FTI / A&M / Alvarez turnaround playbooks.…
Audit one or more existing vendor-scorecard@1 markdowns against vendor-scorecard_rubric@1.0. Produces a sibling .audit.md per artefact plus an AUDIT_BATCH_SUMMARY. Halts on needs_human verdicts; resumable on audited_file_sha256. Standalone trigger or chains…
Author the monthly / quarterly vendor scorecard (vendor list + spend by category + SLA attainment + sustainability score + consolidation opportunities). COO or CPO-Procurement authored. Use when user asks to "draft a vendor scorecard" or "create the vendor…
Generate Vietnamese bank-transfer payloads for VietQR and Napas247 payment instructions. Use when user asks to "make a VietQR code", "prepare a bank transfer", or "generate payment details". Outputs a deterministic payment payload with bank BIN, account,…