Business & Operations

Trade Polymarket BTC 5-minute and 15-minute fast markets using CEX price momentum signals via Simmer API. Default signal is Binance BTC/USDT klines. Use when user wants to trade sprint/fast markets, automate short-term crypto trading, or use CEX momentum as a Polymarket signal.

Guide for drafting privacy policies compliant with GDPR. Includes CNIL 2020 recommendations, a reference template, and best practices. Use when drafting or revising a privacy policy for a website or application.

Map organizational power structures, classify resistance archetypes, design reframe strategies, and produce a sequenced change plan — saved as a political-map artifact to $HOME/.ai-first-kit/. The skill most leaders skip, and why 70% of transformations fail. Conducts per-stakeholder power mapping and incentive alignment analysis. Use when the user says 'how do I get buy-in', 'who will resist', 'organizational politics', 'manage resistance', 'change management for AI', 'stakeholder management'...

Adversarially re-review a PM artifact, recommendation, or AI-generated critique that already exists. Use as a second pass after another skill (pm-evaluator, pm-prd-drafter, pm-decision-coach, pm-value-hypothesis-tester) has produced output, or on any external AI output the user wants pressure-tested before deferring to it. Plays the role of a hostile exec, skeptical board member, or competing PM — looking for what the first pass missed, what bias it brought, and what would not survive a real ...

Synthetic user advocate that role-plays as end users to generate authentic feature requests, surface unmet needs, and challenge team assumptions. Don't use for real feedback analysis (Voice) or UI evaluation (Echo).

Turn a Zoom integration idea into an implementation plan with architecture, auth, and delivery milestones. Use when you need a practical build plan, phased delivery sequence, risk list, and next-step recommendation.

Translates every clause of a contract into plain language at an 8th-grade reading level and flags deliberately confusing language patterns. Use when a user says "explain this contract", "what does this mean", or needs a non-lawyer to understand an agreement. Trigger with "/plain-english" or "translate this contract to plain English".

Handling personally identifiable information under European and Australian privacy regulations.

Use this skill to pick exactly one GitHub repository that needs a refresh: scan a given list of owners, collect signals of neglect — long stretches without commits, failing or absent CI runs on the default branch, outdated or vulnerable dependencies — score every candidate, and pick the single most neglected repository. If every repository looks reasonably fresh, still pick one — the least fresh of the bunch — because the contract of this skill is to always end with exactly one repository cho...

Audit pharmaceutical regulatory compliance -- inspection readiness, CAPA system effectiveness, change control pipeline, data integrity (ALCOA+), and validation lifecycle tracking. Covers FDA 21 CFR 210/211, EU GMP Annexes, ICH Q7-Q12, WHO Prequalification, and PIC/S guidelines. Evaluates 483 observation history, SOP currency, equipment qualification, training matrices, and compliance gap remediation. Use when preparing for FDA or EMA inspection, assessing CAPA closure rates, evaluating change...

This skill should be used when the user says \"IT admin mode\", \"check for security issues\", \"review audit logs\", \"configure Drive permissions\", \"monitor login activity\", \"run IT standup\", or \"manage Workspace settings\", or wants to administer IT operations, enforce security policies, and review pending requests in Google Workspace.

Persona eines Compliance-Managers / Head of GRC, organisatorisch dem CISO unterstellt, steuert operativ Framework-Erweiterungen. Effizienz- und Effektivitäts-getrieben, obsessiv bei Data-Reuse über Frameworks hinweg (z.B. ISO 27001 → NIS2, DORA, TISAX). Lässt sich aktiv vom Senior-Consultant beraten, setzt dann intern um. Aktivieren bei Triggern wie "aus dem Blickwinkel eines Compliance-Managers", "als GRC-Lead", "als Compliance-Manager", "Head-of-GRC-Sicht", "aus Sicht Compliance-Steuerung",...

Guide méthodologique pour tests d'intrusion et évaluation de sécurité. À utiliser pour préparer ou conduire un pentest. Se déclenche avec "pentest", "test d'intrusion", "test de pénétration", "hacking éthique", "red team", "bug bounty", "surface d'attaque".

Process PDF files — read, merge, split, fill forms, watermark, encrypt, extract images, and OCR scanned documents. Use when the CEO mentions contracts, NDAs, term sheets, proposals, agreements, or any .pdf file operation. Triggers on 'pdf,' 'contract,' 'NDA,' 'term sheet,' 'agreement,' 'merge pdfs,' or 'sign document.'

Run payroll end-to-end — gross-to-net calculations, tax withholding, benefits deductions, contractor payments, and compliance filings.

Integrate Apple Pay payments and Wallet passes using PassKit. Use when adding Apple Pay buttons, creating payment requests, handling payment authorization, adding passes to Wallet, configuring merchant capabilities, managing shipping and contact fields, or working with PKPaymentRequest, PKPaymentAuthorizationController, PKPaymentButton, PKPass, PKAddPassesViewController, PKPassLibrary, or Apple Pay checkout flows.

Use when a startup is approached by a prospective partner and someone has to decide should we sign this partner, at what partner tier (referral / reseller / OEM / SI-consulting / strategic alliance), with what joint GTM commitment, and at what revshare. Classifies partner tier from independent-demand evidence vs. preferential-terms hunting, designs a 90-day joint GTM plan, models revshare against direct-sale margin, and surfaces kill criteria for unwinding under-performing partnerships. For H...

How to use @parshjs/files for typed JSON file storage in a parsh CLI. Use when adding persistent config or state to a CLI (credentials, user prefs, cached state) — anything written as JSON on disk. Pairs with the parsh skill — read that first if you don't know how parsh CLIs are structured.

Access PandaDoc API for contracts, proposals, and agreements. Covers API key auth, document queries, status tracking, PDF extraction, and Supabase ingest with ont_facts. Use when: checking contract status, pulling agreement dates, extracting PDF content. Skip when: contract data already in PIL ont_facts.

Implement Palantir Foundry data handling with PII protection, markings, and GDPR compliance. Use when handling sensitive data in Foundry, implementing data classifications, or ensuring compliance with privacy regulations. Trigger with phrases like "palantir data", "foundry PII", "palantir GDPR", "foundry data protection", "palantir markings".

Senior Paid Performance Marketer (15+ yr calibration · Google Ads + Meta Ads + LinkedIn Ads). Owns paid-channel strategy across the 4 Nexus brands (DR · NRPG · RestoreAssist · CARSI) within Phase 1.2 80/20 risk posture and pilot-scale capital ceilings ($1–3k DR · $500–1k NRPG · $500 RA cold-search · CARSI feed-only). Produces single-variable paid-test designs with locked attribution windows, kill thresholds, sender-platform compliance checks (ATT · GDPR-equivalent · App Store policy), and exp...

Post-flight validation for Output SDK workflow operations. Systematic verification of step completion, convention compliance, quality validation, and deliverable verification.

Design OCI compartment hierarchies, dynamic groups, and cross-tenancy access patterns. Use when planning enterprise RBAC, setting up Instance Principal auth, or debugging policy inheritance. Trigger with "oraclecloud enterprise rbac", "oci compartments", "oci dynamic groups", "oci policy inheritance".

Manage OCI Object Storage — buckets, uploads, PARs, and lifecycle policies. Use when uploading objects, creating pre-authenticated requests, or configuring lifecycle rules. Trigger with "oci object storage", "oci bucket", "par url", "multipart upload", "oci lifecycle".