法律
法律文档生成与合规
prowler-compliance
prowler-cloud
Creates and manages Prowler compliance frameworks. Trigger: When working with compliance frameworks (CIS, NIST, PCI-DSS, SOC2, GDPR, ISO27001, ENS, MITRE ATT&CK).
vendor-evaluation
mohitagw15856
"Create a structured vendor evaluation framework for any procurement decision. Use when asked to evaluate vendors, compare suppliers, run an RFP scoring process, or assess a software or service provider. Produces a weighted scorecard, evaluation criteria, and recommendation framework."
contract-review
mohitagw15856
"Review and summarise any contract or legal agreement. Use when asked to review a contract, check an agreement, flag legal risks, or summarise key clauses. Produces a structured review with key terms, flagged clauses, risk rating, and plain English summary. Not a substitute for qualified legal advice."
sccm-exploitation
blacklanternsecurity
Enumerates and exploits Microsoft SCCM/MECM (System Center Configuration Manager / Microsoft Endpoint Configuration Manager) infrastructure for credential harvesting, lateral movement, and domain escalation. Covers SCCM enumeration (sccmhunter, SharpSCCM), Network Access Account (NAA) credential extraction (policy request, WMI DPAPI, WMI repository), management point NTLM relay to MSSQL (TAKEOVER1), client push relay (ELEVATE2), PXE boot media credential harvesting (CRED1), SCCM database credential extraction, application deployment for lateral movement, and SCCM share looting.
engineering-culture
RefoundAI
Help users build strong engineering culture. Use when someone is improving developer experience, fostering technical excellence, designing engineering practices, or scaling an engineering organization.
contract-redliner
travisjneuman
Contract review, redlining, and negotiation support with clause analysis, risk identification, and markup templates. Use when reviewing contracts, identifying unfavorable terms, suggesting amendments, or preparing negotiation positions.
azure-tenant-assessment
markus41
Deep expertise in running an initial Azure tenant assessment - subscription inventory, resource catalog, security posture snapshot, cost overview, and plugin setup recommendations via ARM REST API and microsoft-azure-mcp tools. Acts as the entry point for any new Azure engagement, surveying the tenant and mapping discovered resource types to the right plugins.
Azure API Management
markus41
Deep expertise in Azure API Management operations with deterministic runbooks, fail-fast context validation, and redacted output requirements.
market-data
JoelLewis
"Market data management: real-time vs delayed feeds, Level 1/2/3 data, data vendors, consolidated tape, market data licensing, distribution, and infrastructure."
sales-practices
JoelLewis
"FINRA and SEC rules governing sales conduct: churning, breakpoint abuse, selling away, unauthorized trading, supervision, senior protections, VA and options suitability."
conflicts-of-interest
JoelLewis
"Identifying, disclosing, and mitigating conflicts of interest across the advisory and brokerage landscape."
privacy-data-security
JoelLewis
"Privacy and data security compliance: Reg S-P, Reg S-ID Red Flags Rule, SEC cybersecurity rules, state privacy laws, vendor management, incident response, data governance."
fiduciary-standards
JoelLewis
"Fiduciary duty: IA Act Section 206, SEC 2019 Interpretation, ERISA fiduciary rules, DOL guidance, state-level standards, CFA Institute standards."
advice-standards
JoelLewis
"Regulatory bright lines between investment education, recommendations, and investment advice under federal and state securities law"
pre-trade-compliance
JoelLewis
"Automated pre-trade compliance: rule engines, concentration limits, restricted lists, hard and soft blocks, regulatory limits, client-specific restrictions, and compliance rule configuration."
investment-suitability
JoelLewis
"Investment suitability obligations: FINRA Rules 2111/2090, reasonable-basis/customer-specific/quantitative suitability, product-specific concerns, household considerations."
order-management-advisor
JoelLewis
"Advisor order management: order entry, block trading, allocation, order types, pre-trade compliance, custodian routing, model-driven trading, error handling, and audit trail."
account-maintenance
JoelLewis
"Account maintenance operations: address changes, beneficiary updates, re-registration, cost basis management, account restrictions, standing instructions, and lifecycle changes."
corporate-actions
JoelLewis
"Corporate actions processing: mandatory and voluntary actions, dividends, stock splits, mergers and acquisitions, tender offers, record dates, and corporate action lifecycle management."
margin-operations
JoelLewis
"Margin operations: Reg T initial margin, maintenance margin, portfolio margin, margin call procedures, liquidation waterfall, SBLOC, and margin risk management."
client-disclosures
JoelLewis
"Client disclosure documents: Form ADV, Form CRS, prospectus delivery, Reg S-P privacy, trade confirmations, account statements, delivery timing."
anti-money-laundering
JoelLewis
"BSA/AML compliance: CTRs, SARs, OFAC screening, structuring detection, FinCEN requirements, red flags for money laundering."
reference-data
JoelLewis
"Financial reference data: security master, client master, account master, identifiers (CUSIP, ISIN, SEDOL, FIGI), pricing, and reference data governance."
advertising-compliance
JoelLewis
"Investment advertising and marketing compliance: SEC Marketing Rule, FINRA 2210, performance advertising, testimonials, social media, and recordkeeping."